last executing test programs: 8m27.916999506s ago: executing program 32 (id=1398): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x6d5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x4080) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x1010401, 0x0) 6m37.248953218s ago: executing program 3 (id=1792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x98}}, 0x4048010) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='hpfs\x00', 0xa08482, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='hpfs\x00', 0xa08482, 0x0) userfaultfd(0x80001) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x60, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="58040000020601008000000000a8c873ca039aeb75749af65f03446de8ccf7c1961f818aeab291000000170000000900020073797a3100000000050004000000fb0013000300686173683a6e65742c696661636500000c000780080006400000000005000500020000a3797e6ecd6c2d4b0011b83c695362a0d6f19ded6100719a23a25844fdea49e39e37060fae8378c09da710309592d39f80bd7361d5a3ea853e60fdea2ac5e2b4340923220280f3259a917a45"], 0x58}}, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x440100, 0x100) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000008880)={0x2020}, 0x2020) (async) read$FUSE(r4, &(0x7f0000008880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000140)={0x5, 0x85, 0x1}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000000)={0x5, 0x7, 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0x7bd67b91ac65137e, &(0x7f0000000140)=@sr0, r5, &(0x7f0000000180)={0x4f, 0x8000, 0x0, 0x3}) (async) quotactl$Q_SETINFO(0x7bd67b91ac65137e, &(0x7f0000000140)=@sr0, r5, &(0x7f0000000180)={0x4f, 0x8000, 0x0, 0x3}) 6m36.979886184s ago: executing program 3 (id=1796): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0xc0844123, 0x200000000000000) (async) setreuid(0x0, r2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp-reno\x00', 0xb) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c9741, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (rerun: 32) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xc0, 0x6f, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x6, 0x5, 0x1, {0x22, 0xf7d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x7f, 0x2}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x0, 0x2, 0x8, 0x20, 0x4}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x5, [{0xbe, &(0x7f0000000300)=@string={0xbe, 0x3, "a2f6798784656ded6ffbcb0688d77e502e0d043ce04487a1805a00332e22b9dfb180d95870b46b84d5264cbdb7aa8810d63b55f4fad63cb7b59f310fda6dcec1a00bdb97a192217122cf2cdb5e20566cedd7b423f36c39b72fa6359c47f18ff44f9f3d0140671a8d7f08b9fba04cff137cce9767209f79ae5353149a63cfd62513cd6a1174d6871b0deeaa69a405b9caad7c2e19116d67b20465f5fa60e64452fcc02b1a213dc547d94fafb2efdca93689590d2364d55778298137c5"}}, {0x4e, &(0x7f00000003c0)=@string={0x4e, 0x3, "6b3aafc60269eaa1e35597c97d6b76d3d877416b157c23c60c098b8fff000bfbca96226ad53c1967ff63698f37a352fb8d59c7c93eb62f1692de8d22e10b6099707009fef4272d620e7cab84"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42d}}, {0xe, &(0x7f0000000500)=@string={0xe, 0x3, "bf65ed48d3873c92e27cad61"}}, {0xf9, &(0x7f0000000540)=@string={0xf9, 0x3, "20b35bcc41b93821772f8c8ec742e052d2055167ec20275cc5c23ffbfe0518ff9f86c20be9bc1b1d004268a524849785ac3244ca5b130ac9cf49b5f1917a3c35eaffc5a7cc4b9656fe688bc66ae8b5ac2b4224fd28f4e3b5c7dd43dd8a026e7e352e237266e384c5dad52af85af44a07b100f5720ad8616e31ff3fcffd022f0e991828583d774b32599ab729367a8dea887c5b7c815c6edd5f8be434fe8cceb867493ae4a7f755924bc40cdd6be407a6f1cf6ae9caade2d653cdce34a059bd46c19f08369829edd38354b760cb586de52bfffab17f7de3e4396dda96a0248882d3b63bbbd4d1f342ea6367024d7080e37cba9aa77f575b"}}]}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000000)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @dev}}}, 0x108) (async, rerun: 64) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000006c0)={0x3, 0x3, 0xb}) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x55, 0x4, 0x70bd2a, 0xfffffffc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000075}, 0xc000) (async) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async, rerun: 32) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r9, 0xffffffff}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r9, 0x2}}, 0x18) (async) r10 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x800) r11 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r11) acct(&(0x7f0000000140)='./cgroup\x00') (async) shutdown(r10, 0x0) 6m35.680964236s ago: executing program 3 (id=1803): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {&(0x7f0000001140)=""/62, 0x3e, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m35.583925412s ago: executing program 3 (id=1805): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) (async) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0xc0000) recvmmsg(r2, &(0x7f0000000e00)=[{{&(0x7f0000000140)=@generic, 0x80, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/250, 0xfa}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f00000003c0)=""/136, 0x88}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000580)=""/23, 0x17}, {&(0x7f00000005c0)=""/96, 0x60}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/64, 0x40}, {&(0x7f0000000740)=""/7, 0x7}, {&(0x7f0000000780)=""/190, 0xbe}], 0xa, &(0x7f0000000900)}, 0x7}, {{&(0x7f0000000940)=@caif=@dgm, 0x80, &(0x7f0000000a00)=[{&(0x7f00000009c0)=""/46, 0x2e}], 0x1, &(0x7f0000000a40)=""/199, 0xc7}, 0x1}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f0000000bc0)=""/157, 0x9d}, {&(0x7f0000000c80)=""/174, 0xae}], 0x3, &(0x7f0000000d80)=""/66, 0x42}, 0x6}], 0x3, 0x0, 0x0) 6m35.508105822s ago: executing program 3 (id=1807): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYRES8]) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 6m35.188061096s ago: executing program 3 (id=1813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001"], 0x122}}, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) 6m35.102499023s ago: executing program 33 (id=1813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001"], 0x122}}, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) 6m29.353549611s ago: executing program 5 (id=1867): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x121c00, 0x0) mmap(&(0x7f000065c000/0x3000)=nil, 0x3000, 0xf411119ed9bebbb6, 0x20011, r0, 0xebe37000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m29.211928129s ago: executing program 5 (id=1869): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000280)={{r1}, "ef1c4a22bdf8f42d2b92fe32b982487a41d4ac3027f4839fdb4d3f2de590b2876aafe55d5fe80c50771ba99c842b5169b621df64189c5e9b5c64ef15e68ac99a9f53bd6924e05b5aee711e560a7b91c0f2fe935d2d44b0ce41aaea424af3d354bbf4086fc4b0113c75b65729e4cda7e8a186b1404e62a36016f35da165da03ce42bb4894cdc4a1b2850e1306f4876c35e778a492764724372cd780e2fd2152b3df8425831eac12b6aa1f3c6e600f580015f60ce3c558035b74f3285ae03901f6ce3b140c7c366d8c32b0589cf7a90f2ce3ec744a35fa2d62ac0e9f7cd547380d59ea6dbfa9e647d324243b937d64260763be4ecd2d867179b618f3398ed66aa5a0eb977d9f238743ef152e57c856810a9a3e1ad387d4b722196d79fa976e4c39514289c1d53dceb958accc4fc1812f2a26a21ea56adeb38d8d9f4cfd1fc3b5d457f7bc7886689a697eb7620d7520ef9c92cef4e338ed49b095dfa41846a3051f7c08fb4506c9762fe69f46b6990a00f6ddf478647f2481e05e5d64a30d89e6f0541f191a8fe6b7b6c79cfd89de42b176b7a03042a304f1360b649f9794a3df89a23386a721ed22a9ca0a5dc7f527a56a220f4146653a85298f4ec5376b0edda2fc744fbcd5ac395e21c8c0bc2e048e82d03eb80d39b6404483e7d41d6737ea759d95111dd4bb35f38ab53297929edb62debf90398c007882e825286dec20cbf6bb2f82fd7555d4c937f6aa74f7bdd05a159c6b0c1b7ab06724704c8ece14e27ac58a9ec00983e7f7c27244f357de32dddc06821f844afb9f727dd1d923fedf59f2f962316e37af5e6f04b46855ca3bf0852e6d9581038b723ec3b6c0b40fb8deb9ddf1b1db2c1a754294125d9a8e1d47f4293822398a68517d26cd2c464b916ba5c252d74c8b74f9fb08fae9cf5ff39c12338332b6ee82131bb7b1e314a8dc51c9740a5423fe5edfa729baaa132563d1873591b4ebd2bc6453b54ca8bbc87b605e2b7e06f67677fbe0e678aa0412f77e29adb59d1f780c50527e69259631d2d13d19d386d2da68c65397edc8a4d46cd1ee41278765f9f361ca0b982fb8e551bbe70443aee59fb722a22594897d4521e1edc713485678b148bd60518baef9b49f952aa8e8438906e2187c0c4438de40c5673ad5d4bb36e5930662ef1a3b90ec8cc74ac62b06cb1d20c4ad114f3e4a06431740c78fb7dfb16576623e433ec06fdcdc1cab0db808467b876c1b7e16351a531dd4b07985924f33e2bc8fa9cce7c76e8a7dea0e5f0743c0fe4a758ead7676b80dc467bcb50018029848051aac84334b94ceac0a9a505800cb7ec4270404456e1fbd5743416daff4be4b42004d1845e0da827a977d6202a2039a6be5b2bcbe5955d78ffd2b7856d559458a8633ea034c9e42c84484d62fd3ec4f07486748a789716e5b768bc310742bf32e826c845d0e0574e8497488a3bd6b27d28d575d4f74ca294aa8e96bc94671675cff975ae71d553c84e8f48fd7d2107d1c7f8f3c7b84dd4e38e19e83ce8ac9ec99747b2254de5b7858a990f02a704938f981b817f3cb4c5783522c7e4e0646ec1bfe700a40c1739a3e3ce58ba9e85c21d735000f1a85784829c78769706bebd4fbea92f9b0e0ddbc95b9fc6d8a12a627b0e788fec4a4750c9d6e585ba7b53ed024998d8dcf68b270f5d6f3655f88074db05be4e774b97902632d0e26c296c4813e7937bde3fe4c106f33705ce2f289d0a9dd8f6b5f3a0912a5b421e6b480c8d1c7b2304427641ba7aedc89a07152dd532e59e52787157f22747e3206ea4b8a9e331bf1449970fe7cc27f75eaa2b89ee59d42a8d056e5449628d41c31ecf773b8cf8e56d3beae9f4930411e6066a92de91161128fd811cb0ad9a36100e029517aa3b3b0620eb99eb1d40bbc074a2121b6b53e48e8f4421f83ffbda38352f47be168b2670ad2dacf8f0668f1e3a1f02bda75984392eb2d8886e294b596d46649adac852fb5aeb0b021306c518e4b88e7f81833c8d3bf171ab39150f0e20090749541eb77748a8cee3b38a33a767b6c634f1f63e393d0e7a87900acb6a5cad5eb4590ef1c54c451d6250f1c3655a14a02df0055af511000d2fc89f4c6bf8fc5ae187a75c457dae9b7f32105bc65a7b2cb3e607428a6fd3429836364dda1a3099ae36edadd19721ce32c2c0fce8b07b6c94fc5372036b3b92e56bf04ec25df6103e0e6eb5bedb03068bf2ea6361ed4f092df9e814a152c14852f475bb97536bfeeb76f454c15db7753934f5d7a91d4cc7959c20bfb57ec8027fa2860cecd7b7515503822c3a6f7f9b608cc74454641be1b4e6fbf10b67f9d041938efd3bb2a125788d90df22bb040690c6fd6248d69e5e4652c3cc2ab3a8cfee802cff01f181475816c94561cb11a90735d21401a524ac96e17fa036a3fd6e4718e6421887cc1587e4e906d24544381e6b6e5385f8e27f7c27b90fe36da3c99ffed9785a7c08d1ffec9934e5f31eebd67b6866151d136ec5eff027389fc4ff654627960631be683efd7ed02f80eafa51e5957c93c2aaa564b3f52c252d3eb1f475a3a359121cb3807c8fcf50334ffca9d8a2f60cf176832acbe7656bb27ba430d744f8deb9f9dc15991cec6727a48bb340cd0fb2ac714131d11556cd42a5b99c812826465dc5e6aac75b34f95c8eafcea799d4a71851a5bb393e0f3198b3c8fdfdce9a6323eb476eaddc593ce641fe7345b57503a6457fc69eaec9ccb3c7c4b43b0d1d704b6ba5f8819dd9ed064d83dd3f3bfd63b413acb2bc0b57c4a5ed19e903000a4930fce2c31207e05d6450f66eada7f48c278a89cce1691225852ddca647b6b7c0cc6d7d5a348ab46ade68a5dca6b3e25d130a885373291660d774ca14eb8a76862e146cc2e4a7777fe15ea8a2ff89df0dcd07e36a353bb81d2dfb728a5ca0ffd941215f0e73b5ba786a3a9112e649190d7dc24aa385c784e060307fc549150eff094c681ac2182ce30a5dfae641230b5359e6adb21ceba75c3a7a3cb1f98e9729e3462f781f7ef6fdff00e87c6d7e10d6c1ba5ae30e495e9034ef641bcef66c329d389fb429eeecea34af4fbbe8613087a22d093146c27dabfe3ea4f2e8f14cd86f9530f6caf3601774290109aa12a62abd12f13219315348a508cd26633c28c52b1568a044d835b744415d96b047647e6512a1c9bf13035847349289fd9ae3b72d5d03075dc08bcd399bce93a3ba0f8e5f1ab3d01df0a568039e57360995b5d3de6a529f1cc89ae182807bffe6ff9c2baadabb4e4284de2b7d4f95c189419256c9e28fc8433c1dfd616619dde8a026f8bbb09d76c783a9281c23da8fec5e9385064fb2374ccaad77ff4c06fb3daf3a1c027812581af950bca809b3410de7394d01b215ab30fd0b284724cc1247762269c498bae37d4b94242cb1055e2010d732e3754ad772dd9981e021893cbec5036db920535b9b9f5a9f65e8d01700d14fea718e32925e3329a55079f1e5bff8b3f949b0c7120c11c0b2cd2dc58221c058f3f093cdc88d5e3aafc744d774c047d33116c0c091de4409ce7b0d4f4b554aba8859ac814f96184ff9aa35b7d84f629e89fcad13a1a6178d4f94fe5ff9a0b12a4afa0503356df7edbba5877b8661f6f979f77b1d0e9a749d30ceac697f0ff148cd189d9ddd5632d2427c63ae43698dcdc9e143af71315561a31b3e0c5194a070f366390ad2017bee7780c2007143cebbb68f8ea33550533b84fcc960f275b42568306f3af70f9269321b50acb2cadce50644f51c4ad6e91a2923b9bf18c3475f638b13a72e9927b40e6ebdc3fb97391e54f53e28c0aef7be09c26ff6d251bdb40cba114b1573b88264ed50cf114a0c3499c12f405f8df59f641f8d3bfb645712973f7938e681030fbfc3a5aa230032972abe5b86dc01dbfe6f9f3b60a66b2c7a6079a684fa80cb3e4e6dbac927bc95c26cb562edc81213c44e384f28a0d98c3b0e2f3d93dea5163f016895f7fa0c46ebd76dfb472c66b13082c472addeb29abc248f602b51e6c03bd1821c3319c6646faddfca574ce0698b29771efdabde5d34fb16f45b0d31cd229b3ed9d1a00b943ec00e1a0928d2a6e3e205e7f80a0709a28a10e22dc00deb34be0578b957f201efd032ebbd7d7bedbdd681b11235f46d33aef8d4cd6f76f4e67b9f3d9797c8fa400b24189a7ea2324fd022394da04a3ace14a4b765659b4c7fbd45d95b24719bd9c684cc79661ed4753a6ea0a1cd088349465bd6ca715c892dd698dbaf836186b0d73ffa5ca62225273c60c8f3da33d7658a9ff922f9a9ab6dee9128781f6b6e9a2390cd021089eb6a94274dd1ca08fc7043eaf8053c0b4bb914c82a24e8998d7584bef64fafe065c8fc3f2e1829ca654adc7b2bc3d48aa16107d79be76e1685dbd2f5500209a5f09ea6eed167985470fcc95a5119fd653063256f3ef73d0e7cd731a82aa60124cf0cb7899ed3725135ef28d5114f7710b0629969716e69f10073aa052df0b8349b2c035a7ef7b9494adef86dc0c903b05e203a4a3ff48bb3c22724f2a845fec4e89801b99b9f3c3839eda6442eea9bfa80a9d09222aa917f05e15da347ecb5c8c6d16c76b6cbd0d8a6f40a35bfb378f87816808b1b536ca9ed999e3b6821a16a76b2519047f462cab0fa3bfae718e5cde62385fa34b49b13522c6ab8c8c9c1e167b5204e87fac9dd2f7b4434dbe285d90c4047e4f65f2bc64d9631632b5783319aafc891f415893fac24b4fde7dcd0a2f0258c91e951185c61800927f1f7d5b07900f0333832529a80f645897a4a82c4d44f0c61a7f9242e26edb23c38292c01297e9b6497dfc0b9498b067f3bf94b1753d0755d8188efc94d0d4d242c3db6385133270c075010f4bd34f30a208fe788607cbe2f9d88ce2db8e8aec2c51da96d3b77a75937dbd2d8f8cd3e194da587cbe773d6eb8b4baac06709ebb05d57cd42de62bfb89a3cb19b218ff24fc107eaa10d74e6e5300ebde2b87726f5e33d3f56b65e9841ad4157c9ed9c8262f8c7989640f2418f37efbd6d0acc1e549555cb281dc655bf37e50ec5d166c1121e3e551e5124faf9a9bc6c65a6e5f000be31f15a4e36aef886b367bf1f83e2183d9cb40c5f7148a44177871ff08354af4a9e0f05da2c965595b394ffc1ec20025aeba1711e679218bb57adb134a487028b8ad47e2f78764a437202109e6ac8aa31743467ba3e36b58970695e3ede49fcceebe9b0e0400fa365ab535514198868e7f0c85799690ac2e37566a6d0802a430c2a25d827175b8f9725ed4f2a72430fdcb272d9c060d6d64064ea5fb02a6558cf4eca46c8af0d65bf0dacd0af9fef0d0fc4787da567dc3116f42db21ecb952030894c85cd00df55dce947f8b1b0e4f7bee6ed8d76f098c836290519e1028f2ab8f79c813e42abed2e6427f74aa1004d4f21405bc1ee588869c95404a73f1a18fed3f71bffcd9bb1b57a950359b11bbfc4272a7960dec1ca5bf36d5548adbf5a39eef72acea1119098a442380a2c8e3bc8206bf5295026db0a20c6e72c2ca4e8cc2cdd09263ea62a137524dd3c78e952f51163e0be775d6ca97f484fa6dfdde3f1b4a5cf1782d03acb12b01572f3cc21d99f8ed9e67ce1e8f48e07b4d51d418a60bda1416889ac4305361fe79d1609949d9eff0a1723890378bb44142cdcbe7b38f8b39c585bc57ea6112e23dab6a9a1520a662e173dfc8efe9ec6e9edecc40b4ab5fcd9a0dc63e38137f8dae711c5b5a01811bcf27b206cee9b06f0e15083aa05684429052e49d0a40901fdd72f2bdcd03"}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x2200010, 0x0) 6m28.964806863s ago: executing program 5 (id=1872): r0 = socket$inet(0x2, 0x80000, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async, rerun: 32) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) (async) sendmmsg$inet(r0, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001480)="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", 0x28f}], 0x1}}], 0x1, 0x8000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b61e308d027a9105230010203010902120001000000000904000000ff7f8800"], 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) ioprio_set$pid(0x1, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x1000}, 0x4) (async) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) recvfrom(r5, 0x0, 0x0, 0x40, 0x0, 0x0) (async) sendfile(r1, r1, 0x0, 0x7ffff000) 6m28.815636426s ago: executing program 5 (id=1873): mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='udf\x00', 0x200000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x74, r2, 0xa, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xde}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf3}]}, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) setreuid(0x0, r1) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, r1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6m28.143866024s ago: executing program 5 (id=1878): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x2d) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="10", 0x1}], 0x1}}], 0x1, 0xc0) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='$', 0x1}], 0x1, &(0x7f0000001a80)=ANY=[], 0x10}}], 0x1, 0x4004804) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) clock_gettime(0x0, &(0x7f0000003300)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f00000031c0)=[{{&(0x7f0000000280), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/192, 0xc0}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000640)=""/106, 0x6a}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/2, 0x2}, {&(0x7f0000001880)=""/157, 0x9d}, {&(0x7f0000001800)}, {&(0x7f0000001940)=""/49, 0x31}, {&(0x7f0000001980)=""/75, 0x4b}], 0x6, &(0x7f0000001a80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000001b80), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001c00)=""/153, 0x99}, {&(0x7f0000001cc0)=""/90, 0x5a}, {&(0x7f0000001d40)=""/85, 0x55}, {&(0x7f0000001dc0)=""/9, 0x9}, {&(0x7f0000001e00)}], 0x5, &(0x7f0000001ec0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000001f40)=@abs, 0x6e, &(0x7f0000003140)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/9, 0x9}, {&(0x7f0000003000)=""/47, 0x2f}, {&(0x7f0000003040)=""/224, 0xe0}], 0x4, &(0x7f0000003180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x5, 0x121, &(0x7f0000003340)={r3, r4+60000000}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './cgroup\x00'}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="c422810aacc2000000000f0f8a006000000cc423f9685b960036420f30400f5bdb8fe97812c6400f01c2660f38812bb9200900000f32c744240096000000c744240202000000ff1c24", 0x49}], 0x1, 0x4b, &(0x7f0000000180), 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 6m28.040732355s ago: executing program 5 (id=1880): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x90003, 0x0) fchdir(r0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x70, 0x0, 0x4, 0x20, 0x9, {0x0, 0xea60}, {0x5, 0xc, 0x2, 0x8, 0x7, 0x4, "dab42458"}, 0x7fffffff, 0x1, {&(0x7f0000000080)=[{0xffffffff, 0x1, {0x10}, 0x400}, {0x5, 0x401, {0x9}, 0x9}]}, 0x8, 0x0, r2}) (async) statx(r2, &(0x7f0000000240)='./file0\x00', 0x0, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f0000000380)='./file0\x00', 0x100, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6400) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x142004, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@ignoreqv}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fowner_lt={'fowner<', r6}}, {@uid_lt={'uid<', 0xee00}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '/dev/sequencer\x00'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '/dev/null\x00'}}, {@subj_type}, {@uid_lt={'uid<', r8}}]}}) (async) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000700), 0x549000) (async) syz_extract_tcp_res(&(0x7f0000000740), 0x2, 0x5) (async) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x200) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r10, 0x40045402, &(0x7f00000007c0)) (async, rerun: 32) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000800)=0x6, 0x4) (async, rerun: 32) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000840)={0xa0, 0x0, 0x0, {{0x6, 0x3, 0xffff, 0xf, 0x2, 0xa7, {0x4, 0x9, 0xb, 0x3, 0x2, 0xf, 0x8, 0x24, 0x80, 0x6000, 0x401, r4, r7, 0x4, 0x3a}}, {0x0, 0x14}}}, 0xa0) (async) sendmsg$key(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000900)={0x2, 0xa, 0x8, 0x7, 0x21e, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_address={0x5, 0x17, 0x6c, 0xa0, 0x0, @in6={0xa, 0x4e23, 0xd5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @private=0xa010100}}, @sadb_lifetime={0x4, 0x3, 0xfffffffb, 0x0, 0xfffffffffffffd8c, 0x6}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x6e6bb6, 0x2, {0x6, 0x33, 0x0, 0x9, 0x0, 0x2, 0x0, @in6=@private0, @in=@empty}}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}]}, 0x10f0}}, 0x400c881) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r9, r11, 0x0) (async) fsetxattr$security_evm(r3, &(0x7f0000001a80), &(0x7f0000001ac0)=@v1={0x2, "9b7424f16f558e8520de83d9845a"}, 0xf, 0x1) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000001b00), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001b80)=""/160, 0xa0}, {&(0x7f0000001c40)=""/189, 0xbd}, {&(0x7f0000001d00)=""/75, 0x4b}, {&(0x7f0000001d80)=""/98, 0x62}, {&(0x7f0000001e00)=""/236, 0xec}, {&(0x7f0000001f00)=""/120, 0x78}, {&(0x7f0000001f80)=""/45, 0x2d}, {&(0x7f0000001fc0)=""/206, 0xce}, {&(0x7f00000020c0)=""/214, 0xd6}], 0x9, &(0x7f0000002280)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000002340)=@abs, 0x6e, &(0x7f0000003780)=[{&(0x7f00000023c0)=""/30, 0x1e}, {&(0x7f0000002400)=""/185, 0xb9}, {&(0x7f00000024c0)=""/131, 0x83}, {&(0x7f0000002580)=""/232, 0xe8}, {&(0x7f0000002680)=""/41, 0x29}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/177, 0xb1}], 0x7}}], 0x2, 0x10101, &(0x7f0000003880)) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f00000038c0)={0x2, 0x10001, 0x6, 0x2, 0x8, 0x7, 0x4}) (async, rerun: 64) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000003940), r12) (rerun: 64) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r15, &(0x7f0000003ac0)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003980)={0xf8, r16, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x200}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0xfffffff9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1000}, {0x8, 0xb, 0x9}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x41) (async) lsetxattr$security_capability(&(0x7f0000003b00)='./file0\x00', &(0x7f0000003b40), &(0x7f0000003b80)=@v1={0x1000000, [{0x4, 0x101}]}, 0xc, 0x3) clock_gettime(0x5, &(0x7f0000003bc0)) chmod(&(0x7f0000003c00)='./file0\x00', 0x4c) sendto$inet6(r14, &(0x7f0000003c40)="b86b278b053a8cf72142cca7ba55fff8823bfaf93d82a301f16bee36dcd68431ba80d679809ed76a67512c4f42f3df13417271d92b121dd781c316bcb606850f1f658e3d8a769ee71a164cfba4472316e61db262440ed61d60eba2402a20196559830daecb951690c244f0be7cc5af0bc8bacb1ca116077d8d438978e72096d52b86d4a07fc0f91d8d5f7765d4e163254396ef8de9c8be009bfdad33359afbf1b1a3495a682614b0417c6b8f2cd21413afb88d", 0xb3, 0x4, &(0x7f0000003d00)={0xa, 0x4e24, 0x3, @private1, 0x5}, 0x1c) ioctl$DRM_IOCTL_SET_MASTER(r12, 0x641e) connect$tipc(r15, &(0x7f0000003d40)=@name={0x1e, 0x2, 0x2, {{0x1}, 0x4}}, 0x10) sched_setscheduler(r13, 0x3, &(0x7f0000003d80)=0xfffffffd) 6m27.712207407s ago: executing program 1 (id=1883): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x2c39000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x9, 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141342, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x2c39000) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x9, 0x4) (async) 6m27.62738774s ago: executing program 1 (id=1884): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc401020301090212"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc401020301090212"], 0x0) syz_open_procfs(0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="58f38d13", @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000440006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) (async) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) 6m27.019003505s ago: executing program 1 (id=1887): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='omfs\x00', 0x20080c4, 0x0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='.request_key_auth\x00', &(0x7f00000001c0)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x400, 0x0) openat(r2, &(0x7f00000000c0)='./cgroup\x00', 0x644400, 0x8) 6m26.926896756s ago: executing program 1 (id=1889): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x206d0d1, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='exfat\x00', 0x302000, 0x0) 6m26.871159126s ago: executing program 1 (id=1891): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000d, 0x12, r0, 0xafbd6000) r1 = socket$rxrpc(0x21, 0x2, 0xa) recvmsg(r1, &(0x7f0000000380)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2, &(0x7f0000000280)=""/243, 0xf3}, 0x40002020) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000003c0)) (async) clock_adjtime(0x5, &(0x7f0000000400)={0xe, 0x10000, 0x9, 0x2, 0x800, 0x8, 0x0, 0x1, 0x5, 0x0, 0x1, 0x4, 0xffff, 0x9, 0x513, 0x4f52, 0x13, 0xfffffffffffff801, 0x5, 0x10000, 0x3, 0xb, 0x0, 0x9, 0x1ee22a30, 0x1}) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000006c0)={0x0, @loopback, @loopback}, &(0x7f0000000700)=0xc) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000740)={0x0, @dev, @empty}, &(0x7f0000000780)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x18, 0x3, 0xa, @mcast2, @rand_addr=' \x01\x00', 0x7800, 0x10, 0x0, 0x3}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000880)={'gre0\x00', 0x0, 0x700, 0x10, 0x8, 0x35100b5a, {{0x3f, 0x4, 0x1, 0x6, 0xfc, 0x68, 0x0, 0x40, 0x2f, 0x0, @broadcast, @multicast2, {[@generic={0x88, 0xb, "5ce9304c578677199b"}, @timestamp_addr={0x44, 0x44, 0x91, 0x1, 0xe, [{@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@rand_addr=0x64010101, 0xff}, {@multicast2, 0x5}, {@loopback, 0x5}, {@loopback, 0x401}, {@empty, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}]}, @rr={0x7, 0x2b, 0x5a, [@dev={0xac, 0x14, 0x14, 0x27}, @loopback, @remote, @empty, @private=0xa010102, @multicast1, @remote, @empty, @rand_addr=0x64010101, @remote]}, @ssrr={0x89, 0xb, 0xde, [@broadcast, @empty]}, @noop, @noop, @end, @timestamp_addr={0x44, 0x34, 0x79, 0x1, 0x9, [{@local, 0x8}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x7}, {@multicast1, 0x9}, {@remote, 0x7}]}, @lsrr={0x83, 0x7, 0x51, [@broadcast]}, @rr={0x7, 0x23, 0xb8, [@remote, @local, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @local, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000b80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x118, r5, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x24004000}, 0x8040) write$tun(0xffffffffffffffff, &(0x7f0000000bc0)={@void, @val={0x2, 0x0, 0xa, 0x1, 0x3ff, 0x3ff}, @ipv6=@udp={0x9, 0x6, "070c1c", 0x7c, 0x11, 0x0, @mcast1, @remote, {[@dstopts={0x3b, 0x1, '\x00', [@ra, @jumbo={0xc2, 0x4, 0xfffffffc}]}], {0x4e23, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "4f20d742fc6aa0f7487d559ff1483cb80cf9330249ee76c440a745faae343632", "4a7ae58c213e7158aeef8dae0d7cbbf6", {"3110c4842a35e4ca90a394d5848c2e42", "f3c1608f50d6ee128ff21a006ef85b47"}}}}}}, 0xae) (async, rerun: 32) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000c80)={{0x1, @addr=0x1ff}, 0x8, 0x0, 0x7fffffffffffffff}) (rerun: 32) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000cc0)={@loopback, r9}, 0x14) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x1, 0x7, 0x0, {0x100000001, 0x1520, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x4, 0x9}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) fcntl$getownex(r11, 0x10, &(0x7f0000000e40)) connect$rxrpc(r2, &(0x7f0000000e80)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x64cd, @loopback}}, 0x24) (async) recvfrom$packet(r2, &(0x7f0000000ec0)=""/4096, 0x1000, 0x40, &(0x7f0000001ec0)={0x11, 0x0, 0x0, 0x1, 0x5, 0x6, @random="466a164531be"}, 0x14) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000001f00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x2c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async, rerun: 64) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002240), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r12, 0x404c534a, &(0x7f0000002280)={0x6, 0x9, 0x6}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002300)='./cgroup/syz1\x00', 0x1ff) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2) 6m26.469559468s ago: executing program 1 (id=1893): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f020000000000040187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xed542, 0x0) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x7b9, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000340)={0x4002400, &(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f00000001c0), {0x33}, &(0x7f0000000200)=""/130, 0x82, &(0x7f00000002c0), &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) write$cgroup_pid(r2, &(0x7f00000003c0)=r3, 0x12) write(r1, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 6m26.227018538s ago: executing program 34 (id=1893): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f020000000000040187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xed542, 0x0) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x7b9, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000340)={0x4002400, &(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f00000001c0), {0x33}, &(0x7f0000000200)=""/130, 0x82, &(0x7f00000002c0), &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) write$cgroup_pid(r2, &(0x7f00000003c0)=r3, 0x12) write(r1, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 6m14.377214208s ago: executing program 4 (id=1930): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) mmap(&(0x7f0000295000/0x3000)=nil, 0x3000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x8) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x1400, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x10, 0x3, 0x0, {0x15, 0x4, 0x3, 0x7, 0x8, 0x68, 0x1, 0x0, 0x89, 0x1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x56, 0x3, 0x9, [{@broadcast, 0xb}, {@rand_addr=0x64010100, 0x4040}]}, @ssrr={0x89, 0xb, 0xcc, [@loopback, @broadcast]}, @generic={0x83, 0x8, "0e3b1d35dd97"}, @timestamp_addr={0x44, 0x4, 0xeb, 0x1, 0x8}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x9}, {@rand_addr=0x64010100, 0x7}]}, @end]}}}}}, 0x7e) 6m14.251317891s ago: executing program 4 (id=1932): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)={0x24, 0x19, 0x15, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x24}], 0x1, 0x0, 0x0, 0x40840}, 0x4000010) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a00040000000000008000f4"], 0x20}}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000140), &(0x7f00000000c0)=0x80) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0xe903, 0x0, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xa, 0xec05}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000740)={0x16, 0x7, {0x2, @usage=0x4, 0x0, 0x2a, 0xa307, 0x5, 0x1, 0x9, 0x4, @usage=0x8000000000000001, 0x6, 0x1a9f, [0x7, 0x6, 0x1000, 0x7, 0x7ff, 0x4]}, {0x7fffffff, @usage, 0x0, 0xad9, 0x1, 0xc4, 0x73f, 0xf86e, 0x1, @struct={0x8001, 0x1}, 0x200, 0x0, [0x7f, 0x2, 0xe6, 0x3, 0xaeb8, 0x7]}, {0x3f7, @struct={0x0, 0x326}, 0x0, 0x9, 0x7, 0x7, 0x2, 0x3, 0x8a, @usage=0x68, 0xfffffff9, 0x5655, [0x100, 0x800, 0x9, 0x4, 0x8, 0x2d]}, {0x5, 0x3, 0x4}}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000001480)={0x2, 0x8000000000000001, @start={r3, 0x1, "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", "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"}, [0x7, 0x7298, 0xd6, 0x100000001, 0xd, 0x6, 0x8, 0xb, 0x7, 0xa, 0x0, 0xfffffffffffffffc, 0x7bd385d6, 0x2, 0x100000001, 0x9, 0xac41, 0x8000000000000000, 0x4, 0x100000000, 0x0, 0xcf5, 0xc, 0xa33, 0x7, 0x10000, 0x8, 0x4d99, 0x81, 0x9a2, 0x5, 0xb, 0x80, 0xba, 0x40, 0x4d, 0x5, 0x4, 0x4, 0x238, 0x1, 0x2, 0x0, 0xfff, 0x9, 0xefc7, 0x6, 0x65bf, 0x0, 0x401, 0x8, 0x6, 0x8, 0xd98, 0x7ff, 0x49f, 0x1, 0x5bfd, 0x2, 0x2, 0xa23, 0x7c, 0x5, 0x5]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)=0x0) r5 = syz_clone3(&(0x7f0000000600)={0x208104300, &(0x7f0000000400)=0xffffffffffffffff, &(0x7f0000000480)=0x0, &(0x7f00000004c0), {0x2a}, &(0x7f0000000500)=""/118, 0x76, &(0x7f0000000580)=""/7, &(0x7f0000000bc0)=[0xffffffffffffffff], 0x1}, 0x89) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x8, &(0x7f0000000300)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=ANY=[@ANYBLOB="c3eb81da24400000dc1129165a8d6adb26b4e1b0bb65c33ae0a8c9cf221253f2fc7f76328a117ef7c244f8cb3d025fe7e96331446342b54770558648b41c8677b77608dee0b5c0161451a2874a76ae51215b2523be895aff", @ANYRES16=r10, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="08005a8004002080"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) r12 = getpid() fcntl$getown(r6, 0x9) r13 = openat$sequencer(0xffffff9c, &(0x7f00000000c0), 0x101003, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r13, 0x40085112, &(0x7f0000000c00)=@s={0x5, @SEQ_MIDIPUTC=0xef, 0x0, 0x80}) sched_setscheduler(r5, 0x0, 0x0) r14 = getpid() sched_setscheduler(r14, 0x1, &(0x7f0000000200)=0x6) r15 = getpid() syz_clone3(&(0x7f00000006c0)={0x220000, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240), {0x28}, &(0x7f0000000280)=""/64, 0x40, &(0x7f00000002c0)=""/144, &(0x7f0000000680)=[r2, r4, r7, r8, r12, r14, 0x0, r15], 0x8}, 0x58) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$bt_hci(r16, 0x0, 0x13, &(0x7f0000000000)=""/2, &(0x7f0000000080)=0x2) 6m14.087813342s ago: executing program 4 (id=1934): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e37040201", 0x27}], 0x1}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r2, 0xe) (async) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x2, @local, 0x3, 0x1}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x65}, 0x41) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r8, 0x28, 0x0, &(0x7f0000001b80)=0x7ff, 0x8) getpeername$packet(r6, 0x0, &(0x7f0000000040)) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) (async) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r10, 0x29, 0x2c, &(0x7f00000002c0)={0xfffffffc, {{0xa, 0x4e21, 0x3, @private2, 0x4}}, {{0xa, 0x4e23, 0x10001, @loopback, 0x7}}}, 0x108) (async) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040f04"], 0x7) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) (async) flock(r3, 0x5) (async) r11 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r11, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) unlinkat(r11, &(0x7f0000000000)='./file1\x00', 0x0) (async) ioctl$HIDIOCGRAWINFO(r11, 0x80084803, &(0x7f0000000140)=""/238) (async) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f00000000c0)) 6m14.063312437s ago: executing program 4 (id=1935): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000001c0)) r2 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0305616, &(0x7f00000000c0)={0x0, @reserved}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010003000000000000000a00000008000300", @ANYRES8=r4, @ANYBLOB="0c0050800500020000000000eae907e5f29fad39b1b1d32a4122e8d9149c4d531c797fa957920f48ccdaa37d9483d7513871768a6b18e537e46e2f051faa604c495a4ad6ff20f801486106e4aed88e4cfbebcaa45486681513b44c50577df010e009e5f9d0d1c669d5573df9d51765a1975a310f904b5f3cc06456c072cba1e03ba25edf968998252bdc1914f9b7baaf4a"], 0x28}, 0x1, 0x0, 0x0, 0x48881}, 0x40) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x40080) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000140)=0xda1) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x46, &(0x7f0000000280)={0xfffffffffffffe62, 0x0}, 0x10) recvmsg(r6, &(0x7f0000000140)={0x0, 0x1c, 0x0, 0x0, 0x0, 0x53}, 0x100e2) creat(&(0x7f0000001380)='./file0\x00', 0x29) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 6m13.912864041s ago: executing program 4 (id=1938): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x11, 0x48a, &(0x7f0000000040)={0x5, 0x1, 0x40}, 0xc) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x32315559, 0x0, 0xfffffffd, 0x4}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000380)={0x8, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}}, 0x108) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) fadvise64(r2, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r2, 0x93771000) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x11, 0x48a, &(0x7f0000000040)={0x5, 0x1, 0x40}, 0xc) (async) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x32315559, 0x0, 0xfffffffd, 0x4}}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) (async) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000380)={0x8, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}}, 0x108) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) fadvise64(r2, 0x92, 0x5, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r2, 0x93771000) (async) 6m13.559770536s ago: executing program 4 (id=1940): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) mmap(&(0x7f0000295000/0x3000)=nil, 0x3000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000002c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x1400, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x10, 0x3, 0x0, {0x15, 0x4, 0x3, 0x7, 0x8, 0x68, 0x1, 0x0, 0x89, 0x1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x56, 0x3, 0x9, [{@broadcast, 0xb}, {@rand_addr=0x64010100, 0x4040}]}, @ssrr={0x89, 0xb, 0xcc, [@loopback, @broadcast]}, @generic={0x83, 0x8, "0e3b1d35dd97"}, @timestamp_addr={0x44, 0x4, 0xeb, 0x1, 0x8}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x9}, {@rand_addr=0x64010100, 0x7}]}, @end]}}}}}, 0x7e) 6m12.97205144s ago: executing program 35 (id=1940): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) mmap(&(0x7f0000295000/0x3000)=nil, 0x3000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000002c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x1400, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x10, 0x3, 0x0, {0x15, 0x4, 0x3, 0x7, 0x8, 0x68, 0x1, 0x0, 0x89, 0x1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x56, 0x3, 0x9, [{@broadcast, 0xb}, {@rand_addr=0x64010100, 0x4040}]}, @ssrr={0x89, 0xb, 0xcc, [@loopback, @broadcast]}, @generic={0x83, 0x8, "0e3b1d35dd97"}, @timestamp_addr={0x44, 0x4, 0xeb, 0x1, 0x8}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x9}, {@rand_addr=0x64010100, 0x7}]}, @end]}}}}}, 0x7e) 6m12.901208514s ago: executing program 36 (id=1880): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x90003, 0x0) fchdir(r0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x70, 0x0, 0x4, 0x20, 0x9, {0x0, 0xea60}, {0x5, 0xc, 0x2, 0x8, 0x7, 0x4, "dab42458"}, 0x7fffffff, 0x1, {&(0x7f0000000080)=[{0xffffffff, 0x1, {0x10}, 0x400}, {0x5, 0x401, {0x9}, 0x9}]}, 0x8, 0x0, r2}) (async) statx(r2, &(0x7f0000000240)='./file0\x00', 0x0, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f0000000380)='./file0\x00', 0x100, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6400) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x142004, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@ignoreqv}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fowner_lt={'fowner<', r6}}, {@uid_lt={'uid<', 0xee00}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '/dev/sequencer\x00'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '/dev/null\x00'}}, {@subj_type}, {@uid_lt={'uid<', r8}}]}}) (async) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000700), 0x549000) (async) syz_extract_tcp_res(&(0x7f0000000740), 0x2, 0x5) (async) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x200) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r10, 0x40045402, &(0x7f00000007c0)) (async, rerun: 32) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000800)=0x6, 0x4) (async, rerun: 32) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000840)={0xa0, 0x0, 0x0, {{0x6, 0x3, 0xffff, 0xf, 0x2, 0xa7, {0x4, 0x9, 0xb, 0x3, 0x2, 0xf, 0x8, 0x24, 0x80, 0x6000, 0x401, r4, r7, 0x4, 0x3a}}, {0x0, 0x14}}}, 0xa0) (async) sendmsg$key(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000900)={0x2, 0xa, 0x8, 0x7, 0x21e, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_address={0x5, 0x17, 0x6c, 0xa0, 0x0, @in6={0xa, 0x4e23, 0xd5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @private=0xa010100}}, @sadb_lifetime={0x4, 0x3, 0xfffffffb, 0x0, 0xfffffffffffffd8c, 0x6}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x6e6bb6, 0x2, {0x6, 0x33, 0x0, 0x9, 0x0, 0x2, 0x0, @in6=@private0, @in=@empty}}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "1c24844a5660f769b0d1a6dfe7bc6b65e4d464a99396fc45cf18fbb5119f6ef3d411e1937a52653bfc9dea76079dfa14e934c5eeb0569878471455c5b89d14fc6d2bc92d2dd45d95a53d49db2569735e3e719a3865dbfbdee86b0b0b3c2d407135f2fd52a69bd30707fe16f40e29162708f852ff4845df23e41cb585b51afac948967abf18a11a0737759041742604f3c45a7513853e08198b12dd643807f6bf34e9472a647d57cd3297d7414b8ddeb09ed3c8cdaa7ca9708767336107df1134fbb4646306fa3378fb014767b3a64dad15e331105290d221906c97cdd40a03fcef62af0e0ee5836783bdea7595793a6d2767552bf78c07639b1c21a460d6c25ab65d613187a7cda653b1b6dfb5b3cd59378698c3fa2a4ec84d25eb7b429a41ad3ef3d85a2776a476d9a686e578ce8b79fe96516c87c4192f725626ad0181834e02df2c0b3d6c74277de9e9de2ae9db94a69879c7b31b2c2bf35c8a992d3254093f913685c096a805f6d50aa935a8912dbe322717c5a2019f87518763d51e5b2ccf78d9a56c9bf33211d12bcd3fb0601aebaf6271ed0bd82af328220187f3e53da3fd9b41ae0c2e1b2883a7e9a0fa8811850dd14e5d0b0f5b748aabded62f5244c584a54f0fc5a0276c18cd579676f43fbf726ae4494e826d2f0967d78f52b816bc71fbe70682eb45cd6d07756b357b6991dea251325b7f0025ec53a6fa66e747734bca21efef04aa283b0d7696d9380b220104e50896145532b9c998a3c06ae92bba93f2dd6da83038c0ec5733ee5269fe549826dd85eae7b33e9b0ddcee930be91e1fac4699bac84fcdc9a407cd37e40d0ff77b1c999384c535f10db9cf5ff8b82be3d027ab85ddfd993b7156989839dda43aca1bbddb771ef28a1c49a49b653fa0c6a26a2bdefd3c71c88e00d0334560956689fc05133a466796e46b54adce45b5dc8f454ba17d673d03486afb5124af3d36011daaea1786348ee316e16cbd04835f77ea311217598a7fb908ec575a3d1884ee94efe98443229d837290403dd5393183866456b9e3bf4adbfe93457c71328480250e9c7658abd13f7c61f4af52d90807cf8a29b298fd2d9e34d917861b3c19749d995f8b115c9c1456a70e34bf87650adf3b0f0f567a217d3ef16d80cd5ccbe683b08f399cd08dc16136ea42ccad63a70b60ed6ea59db33087175cba733f4917394efc55e471722a7bc927ed426f407f22ea40e6367b14a6c18628967e51eedefb7673d202e8147d0c9745d72cb5fe6240c033b41ea4d702ead41e99fc900c4d66845a5154621fc910841e35248da1a4f6712d90243046c0ce47e85367bf7c90ab727694d9f2d6307abf0491b5e5c2f697c6b0e0ec91dec48ca80e2aef2b9b251aebd09969e0ee55d8631827d216bef18a8721fb566ff0dd33d2aa2cec38ab1f8e5e8e49e106c0d2cfe4d1e87a0d74338c542ac5f9ff94723a04727abd24276612dee59e3d43db03ce861ddd0bc08b28393ec0cca4dfb4338b4ae7cea62a6bae5861a93e19bd52b0cff7082af1c843d1686ff65ca6a445f9f6dd9f7c216efe96028b61125af844ae976f5fd0063d6039073df92590f2e70804b4d54aee46544915373f73a00014b8662c6f53501243cc4ba3a6ac92ef40486c5e01432bc5dbdce82ba7e7f2b9b2b4f17de007b81b3d53e7214caa1f1d07269747682c451b08be3d89f6f3c6153eff902d40a17f4b8fa43b3050732d15632cc813f8e135f0b0deb3723dcfd276ad2869270d4ecab5ce0650f8e80c0b316fee250ba878bc39a0baf69dc26863ec535b31e1a1f0e2c8c7f16a2fdcf686e54e2acd20088126b00e92de766bb0fa88e3aa53a6c176fe1c9c129725f63f29bcfde4ef26e05bf58faf201823c303ee416226c4cc87bd07d8adf113af1a8cfd6399504414737a5c764968e005e54e0878e3c15aeb8df2552a76cd202c3df90f88977887aef57a0c1fb1fed266c90b822d073eb012e895d153513385244696edc17d53aad4ac3daf1cf8c77cdbdd427c20b0a17e57a1cdf08e6ce73dd5994d85a6ea39cb4d385446023376a1e376311b914782f0be34ab9b859b2aa87d702c6edabbff86b8c4bef26d298a1aaf03525c42936fc40eea25973452f09ee7275c73aa7998fd87c10aded603358aab493d6f2afb7f734441cd055edd962b242ee798a9ac21a3193508af5f587364e0c4b6e95d15c8ead1b2bd67e9a7a5588f575841d84c6f5262d1b1a29a42b6fd68bf5f1f1712d547074db272b38039a8391e1972de1f95f96ff874f5b3f73b50a2f8fc92bd36683416fdee87d0aad5bd0acadf4e9cea1dc6cd654a177d9089ac06ca7a3ceb8b65fea58b003b9848eb3c93326eea3660938897e08fbf3d02a9952e62605440724c4ab2fe9e05f2ed6136723884e7c119a67f1ed3c23cef246f729ee8f345ca5581a82b1d3e92a73b3ab49b09062403994c37c50823f1efceb062e8f0102c8293222cf60c15d0363a742ec05b95429c8affcec65215ea72113a1b46cf1a15255e6a15dd8f79251b2aea56d755685a765192c6db7086e80e1c1a202117f4fcd6a83d4fe3bbb4533f0394a4b453f1cb4c89dedbe2b3e8ae17c85b18965e2aceef00b59660b09c6771a093afe675ca908e0538e1f0800aec126e77d76ba28105c63a50779b5fdb3cbca5616b2c997fe1e0e803893d98249e9662894c28bbc46831473dc488436467b38f28aea245f3373acf7b8cdf01818febb8600eff9721af4c5d245f1054e8676c2e1658b0ba5fc3ee90b661be2c5b154e5bce661cc140fcca8373920c1128ecb2bd459cb097f77cdd42dc2f9da5295d44a50ea17ea68b342c414a5e205ada77422354d4a97eded1a9d53df7d833bc31c9fdb6500b03d8b5f23d09566f9443a457594e10b49354c1ff5f2ab74e32d67b5992cbcecc0970faa2f94150fb870c0c8439c598904e86cfb8d62ff513a2ad227cc91d43a707af345ebc4eedc5074a1d0007674240f2d1d44887fd3d586a8e736aa62b3ff923e4f58b0e787c23bd8669c9a9999c05523a2ab2e8dd6aaca30f3a9530094130e282dcf7a9d2d53cfbff0e463cbb18a480fd9db4a099a09539e6fea96a8c916d02650a4a0f1783da9273341024609a2d190900cfe257935884499c5ea87eb851ac4c1dfa57c5cd5facb42cbf2418d831fb0fdce6e84940f85628a67d3b694b662bd4e307434182bb9ee1c1a62fe1a1d3ec90c294bfc9e13faf19177aecb9823709d21e43f620f0f67738ae1f2a3429888fea99cf99bd272a32d032c8c7ccecf8a8d91e16810755d48cc47db7944767d8d32e7494ee3006591f79fcdb349bad89a07a0962db0225022972e45cf1f7de9f3c494bbe5e8a143fdbf2bc2e3b23ad115a08f733b29ddbccd190aa9d55fc0394627e5b461ed454eda9a69485e4cabbb3fa4f11d3f037c12560f74e3e2ad4be9521adce65d684b48924a917d7a1555176cf4fec9e6a37fa5032a0579f3d1a72063893f41082f10804e47e86a287fbcb3cae1fd03a1f59f2f333c10641bf14ab51d08e2d05fee00265844b4b8f48714194f663402324acd2845cbedc35a5ea0c915a620eb383cf21833c2ecc7a073ee138f49cdd20b91fda36281686469045693c97ccc0affa57de1d518c870aed9050ebc88cb41d432bc938521e83ef0e637c84f024b661f3b0a5fafdea0822c535c50d63075ab5de4d50613396bc202f09442b687224dfa0d3da58be5a3ce1124103e177f23c89c7b5faa8827f4a167d4bd740661c07565d69eb0ea34dea3d6924c90d055c2155886ecfdcfab52acd4b7d5b0a3aca08e702e54b63d38273175c6e7bc544550c8bb4c34abcd342a91f3ee4954348a498749ca88f65dea50bfdca7c1496eb2e1e0289ff14c68a4e48303c23011e77d9d2b8188a0596026e57374a01448dd4ac85d6d8d31dfd659291874a6015c2929318e1bdc4420b6b5b6847c137580ff664ad1ecb06a9b3f7713ef0dba16bfb42f46bc0784d775e7fc4752ec549971589b4c71774c8b78ad17e4bab23c6c14cfaa4739d6783232060f89bbf5959c9a758d32cf9a3756c44dcbf9138046709b19e269c1a7fc08d007b4a10a9d9b1404dfe87b61bff90c951916d7966153cc993cc11c1d646eedf2c79b54811e36943801a8532885eb23e77d220057e84d0fc9c3b79f010858ec7ee55f6905f69f807fc84432de3ea28e874d6b7de650f3a0db80f90146b15c80326af9071e442ecf6f04b3fd74a11777561f6894261facd11761447753dd6deedbe6d1ed42cfbf8d7fb6d88adc2f0d9af668d50ac810b0896663ba3125b5b8c5d42a67c6a32dc9cd7e4127e318319b81574acc3faa561343d90a2ea752f0fd30b8e327d14c5eca7de1a1a132f8a1a6a40ab2086063542709a67a4b7bac5f8762d3bd61d0d941d645ab7af3bc79849390880df3d2e41a966eb240a6787b0c9c4f9a972a83a9877e69ffd4d7c47563959f6b6170190a1ee42eed81abf36b173ddad1bde197866f66527911f812f04011027324bfca5567460ee33a5d0e6263904ad3c62db43cab449de60a4952ecf5dd6effb851116c068ad246f6ea923cdb6c581a7ce1299f1a7131c84ab4b19db20107085a5f9a7ee301a2d5c0c539635b4fc8518afe1c6ac85c3da16d3359cfdaba6bae77397ec1faa560212c67570b0a83b3d83e8016808ef87cedbbc472ec61fa6493084509ba81672df1f88aaf2cd2ba91ef31ab8c0c42276ca28bfc1edfe2f249995dc7aae50e9eec555f3eccb48151f00421a77bd503687fd6f14298d9299167493ce67a458f53227ec4bc81d855c8c4573db4784f0780275e188b78552b77378f01ab0991539e2e1e2f2b93cbfa3b1b8767a8c2f55ea8658788ce1d7aa792a687f992ac59b2cb8b12136931e96882531882be7bcfeb03e074607d2ca8a9ba6488afbf3144832bdfb7d8641b0ad8febd66b4596baf071a9fa22f625c4225e801713144878ae2e70a6e8966d2160caff3cea3bed0a8a57739a47e13edcf4e8f2735838b45f4a7c815f1690c445228c739510dd04f75517b1528755f3595ad890b0133bc7677843fd40dd6bd0b2448f22ccf8c0f535dd940c622b5f60f40445a00b147d5c19bb9233ecdf7034fec3dd1ce206b4b0a7a949c1ea33dea1aebc22c5868e93c6f9c959cded38122785e81ff6581b0f389a81f4cd17396b7d4c363d7101f237d6ece624b69217ccfee79525c201ab6d2e7686bd17fdfcf522445629e35dd8fc80c172c685edfc2f46a6d021a7663f9ca7bee2ff8770615dfe2b68d091a510c5592866659b6212ae8e82944e954fba32368b8b2ed2bb49f9cd97e90785a1ed6cd637a9325f8115e22cd638000b9bf52c8caf6f145502c569c5722371f23187e6e0437fea45a74017c86416f9952ed5347c7f14945ae104acbe93a3f97c6f1a22f4c45f033b20c13078c010205a377f25d4b80e8b5f81eb2985acd25400a871f168e365f7c2696e7ef595a900cbb8baf544089f7e6d49c0140c31aa6a9803559ea1cf52ff4bd3b0a94f5157f75f486f90fccfe95028a8aa8040eea48f6826dd6baae1b0f3d4ec9fe35e4b78e05b651babf89b0f5cefdf52d8b9fc16b9bf57de251b7f6074836df1e8c16b59762a267750b9d1f8fac3f40226bcd840e6963a34a64100b4142674bc2a7a8388f4160581574949a168da7cebc933e13907c7856a6bcc4cc56e10b4ad02368d3a9ac0fb1c7a9c2c222f8bd70ef6b9d75062698b351ff127dc27c6773859875bfb48a27a5c6ea3dff3bef28caf12e25200bc411f2ac948"}]}, 0x10f0}}, 0x400c881) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r9, r11, 0x0) (async) fsetxattr$security_evm(r3, &(0x7f0000001a80), &(0x7f0000001ac0)=@v1={0x2, "9b7424f16f558e8520de83d9845a"}, 0xf, 0x1) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000001b00), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001b80)=""/160, 0xa0}, {&(0x7f0000001c40)=""/189, 0xbd}, {&(0x7f0000001d00)=""/75, 0x4b}, {&(0x7f0000001d80)=""/98, 0x62}, {&(0x7f0000001e00)=""/236, 0xec}, {&(0x7f0000001f00)=""/120, 0x78}, {&(0x7f0000001f80)=""/45, 0x2d}, {&(0x7f0000001fc0)=""/206, 0xce}, {&(0x7f00000020c0)=""/214, 0xd6}], 0x9, &(0x7f0000002280)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000002340)=@abs, 0x6e, &(0x7f0000003780)=[{&(0x7f00000023c0)=""/30, 0x1e}, {&(0x7f0000002400)=""/185, 0xb9}, {&(0x7f00000024c0)=""/131, 0x83}, {&(0x7f0000002580)=""/232, 0xe8}, {&(0x7f0000002680)=""/41, 0x29}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/177, 0xb1}], 0x7}}], 0x2, 0x10101, &(0x7f0000003880)) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f00000038c0)={0x2, 0x10001, 0x6, 0x2, 0x8, 0x7, 0x4}) (async, rerun: 64) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000003940), r12) (rerun: 64) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r15, &(0x7f0000003ac0)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003980)={0xf8, r16, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x200}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0xfffffff9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1000}, {0x8, 0xb, 0x9}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x41) (async) lsetxattr$security_capability(&(0x7f0000003b00)='./file0\x00', &(0x7f0000003b40), &(0x7f0000003b80)=@v1={0x1000000, [{0x4, 0x101}]}, 0xc, 0x3) clock_gettime(0x5, &(0x7f0000003bc0)) chmod(&(0x7f0000003c00)='./file0\x00', 0x4c) sendto$inet6(r14, &(0x7f0000003c40)="b86b278b053a8cf72142cca7ba55fff8823bfaf93d82a301f16bee36dcd68431ba80d679809ed76a67512c4f42f3df13417271d92b121dd781c316bcb606850f1f658e3d8a769ee71a164cfba4472316e61db262440ed61d60eba2402a20196559830daecb951690c244f0be7cc5af0bc8bacb1ca116077d8d438978e72096d52b86d4a07fc0f91d8d5f7765d4e163254396ef8de9c8be009bfdad33359afbf1b1a3495a682614b0417c6b8f2cd21413afb88d", 0xb3, 0x4, &(0x7f0000003d00)={0xa, 0x4e24, 0x3, @private1, 0x5}, 0x1c) ioctl$DRM_IOCTL_SET_MASTER(r12, 0x641e) connect$tipc(r15, &(0x7f0000003d40)=@name={0x1e, 0x2, 0x2, {{0x1}, 0x4}}, 0x10) sched_setscheduler(r13, 0x3, &(0x7f0000003d80)=0xfffffffd) 5m56.027955111s ago: executing program 0 (id=2037): creat(&(0x7f0000001380)='./file0\x00', 0x29) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000005000080050011802e"], 0x20}], 0x1, 0x0, 0x0, 0x10}, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x143100, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x48cd40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xc0010141, 0x0, 0x8}]}) 5m56.025414579s ago: executing program 0 (id=2038): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd202, 0xd, "10120dfe0ef7f0200000ff490a0080002a00"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='overlay\x00', 0x200000, 0x0) 5m56.025174306s ago: executing program 0 (id=2039): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) io_setup(0xb, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffda4, 0x3, 0x0, 0x2}]) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) sendfile(r1, r0, 0x0, 0x7ffff000) (async) sendfile(r1, r0, 0x0, 0x7ffff000) 5m56.024581283s ago: executing program 0 (id=2040): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000100)={0x6, &(0x7f00000003c0)=[{0xf, 0x15, &(0x7f0000000000)="c70ecaaaaa9ff8d3935ad416426c5365b66d68ae99", 0x0, 0x1}, {0x6, 0x64, &(0x7f0000000040)="e64dcc54a4147ba6b034e7053f287d4a19e068e312e0ab9285b01bf9be7a432331d96d7c03b59ea808be442a43270d633f3aded598e919369360412e08212b2209ef44baa90ec13f711cba9ab998e04cb0f46ea566239861bcca5b60f1d8d199fa5e9631"}, {0x3, 0x97, &(0x7f0000000180)="7cfb22d1020d798c8fe59e2ad04ceac7009a158524c5ced0d3aee5e219e98a301995697784b2579b3853059fffffdb6aaa1f3a84e5c06bd9fc32e3fe8934eac6ded74dc5b726ed16be6fdb6b1df6a9a834c7889c832e75e578a4d1de958fba054d76feedda6d398bb3841bdcfb9a17e4258961fef4c19fb51ccb3cc016960ee4fa8119c65c6907b10a397237c4cd50c3a5f0f339052945", 0x0, 0x1}, {0x7, 0x2a, &(0x7f00000000c0)="35eb51c0b2df54464d187836e47a37d5e9c0b927e82a4d6c6b1b44311fd4bb65e6f656178417687e5b6f", 0x1}, {0x1, 0x4a, &(0x7f0000000240)="ef3c5f87f68c065036c2551af755d02b6660b79093df250b67a512cc7c52dd521d108e3971731c6b4dd68b9541a9e3c39ca6b64e8d515118702dc9fa089a062e93e3fac589ecc99b344c", 0x0, 0x1}, {0x1000, 0xed, &(0x7f00000002c0)="a0e7ee216521b3d9d17dfe1cd9175f5c4d297c3984b9e18e5c50e0241d84be818226c21d8fc5f1808ff3c6bf9a3e46d7c376df4ae953a2ad52c883aaadb625176ec91dc91a8623a1a1691bdd990673d032ce3321f480f0d11d49e37d8bd3572752fdb9f8cfcacc5a98bf5539c4fc413044a5420acd932d3e2985fe41e5634e798ed5dbaf2c721c0660e45a4c9cf78a64d1872220ffc6ef5b748c27201c545e05b077776e384b1f6ae76fca8566557ccbc4058f4cab5f6be310bcde924679b30c6efa5f39e30c11f33d40afd8e385abc944a6e9cfe108bbb997f8b59d5f935a3acbcf1f7f7cadb5dc4aaece805a", 0x1, 0x1}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)={@multicast2, @loopback, 0x0}, &(0x7f00000004c0)=0xc) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000500)={0xffffffffffffffff, 0x1, 0x4, 0x3, @vifc_lcl_ifindex=r1, @broadcast}, 0x10) syz_io_uring_setup(0x51d0, &(0x7f0000000540)={0x0, 0xa83e, 0x400, 0x2, 0x14d}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4(r3, &(0x7f0000000800)=@can, &(0x7f0000000880)=0x80, 0x800) syz_io_uring_setup(0x67e1, &(0x7f0000000640)={0x0, 0xaafc, 0x4000, 0x3, 0x27}, &(0x7f00000006c0), &(0x7f0000000700)=0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000007c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r5, &(0x7f0000000780)={0x40002000}, r0}) 5m56.024143203s ago: executing program 0 (id=2041): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000001c0)=0xd0) ioctl$CEC_S_MODE(r0, 0xc0506107, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x9, 0x3032, 0xffffffffffffffff, 0x1263b000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r1, &(0x7f0000000400)="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", 0x1f000) 5m56.023607371s ago: executing program 0 (id=2042): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008"], 0xe8}}, 0x8040) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01640000000000000000210000000800030003228c2259911dbc5035dc8bfe1bebba9b8837bc471df0d2fce5a7bae4b37de1127d85a764dcbe92f18097d9f5730a41ac2a7d32d0b5029140fce1d5558058df5162649fc0d05e63553345b8cc9148d86e3ddf43a956b4f9b59d5917a0c966d3a2333c49ec5e8660817fc453822b6e91b2742a3e401e8d0e13bb01ac15dbf81763fe79bfb597abcc60ba7b38b8feda35"], 0x1c}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x250000, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f0000000080)=""/135}) (async) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffbf, 0x7ffff000) (async) mbind(&(0x7f00003ad000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0xffffffffffffffff, 0x400, 0x2) 5m40.63822722s ago: executing program 37 (id=2042): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008"], 0xe8}}, 0x8040) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01640000000000000000210000000800030003228c2259911dbc5035dc8bfe1bebba9b8837bc471df0d2fce5a7bae4b37de1127d85a764dcbe92f18097d9f5730a41ac2a7d32d0b5029140fce1d5558058df5162649fc0d05e63553345b8cc9148d86e3ddf43a956b4f9b59d5917a0c966d3a2333c49ec5e8660817fc453822b6e91b2742a3e401e8d0e13bb01ac15dbf81763fe79bfb597abcc60ba7b38b8feda35"], 0x1c}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x250000, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f0000000080)=""/135}) (async) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffbf, 0x7ffff000) (async) mbind(&(0x7f00003ad000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0xffffffffffffffff, 0x400, 0x2) 4m26.619706677s ago: executing program 7 (id=2819): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) (async, rerun: 32) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) (async, rerun: 32) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) (async) chdir(&(0x7f0000000000)='./cgroup\x00') 4m26.531810855s ago: executing program 7 (id=2820): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000a00"], 0x10b8}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2309c0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x9) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000001c0)) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000240)) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x10, r1, 0x6ce7c000) mount_setattr(0xffffffffffffff9c, 0x0, 0x1800, &(0x7f0000000200)={0x1, 0x70, 0x2c0000}, 0x20) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, &(0x7f0000000100)={0x0, 0x5, 0xbb, {0xbb, 0x23, "d132042f58979bdf2283e6e32669d803061c7dc50795186a84633db89b24ebc620bbfe0a8dae99c24c677ddefb4d04a3f0f81e87d327cdd833be4bfbfe97a1dfe264761de07a6a4986dbb2ae55b25b0d8b0045de010c8a3a66b010b9d2673f16e7d5c1f929a59a90951cd9d94743d631105da0cb9d119d7529a40554d23f232866603263f4874bf68ef719b0aa628ddd98d4a79e62b80db2c9de7e53fd301600329269e15779093bbcb2288e3253fd755953a6f412e6b4e72e"}}, &(0x7f0000000240)={0x0, 0x3, 0x89, @string={0x89, 0x3, "c11bf08f8a9bdef9e865b73a0aa4e7aa8916af087c74ef6c1dd9a3a53f923085c03926c45d81726920acb8b7b2babfbf901df6cfe5d6c04071e29cbb16857b796888ce22de398f3e65d3a3c22f717bf6e98b3d502e0d71922342c3e91e00f7832b8c985e3186e868a6428ad37b97615706f439b847a8723678be55ed0654d2219f04c26e5d3e62"}}, &(0x7f0000000040)={0x0, 0x22, 0x13, {[@local=@item_4={0x3, 0x2, 0x0, "b9137025"}, @local=@item_012={0x1, 0x2, 0xa, 'Y'}, @main=@item_4={0x3, 0x0, 0xb, "deaa4694"}, @local=@item_012={0x1, 0x2, 0x1, 'D'}, @main=@item_4={0x3, 0x0, 0x8, "79ac32c2"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0x2, 0x1, {0x22, 0x725}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x0, 0x9, 0xaa, "14e9eadfb0e720f67d46ec24bb2257ddb895f26f10d305db54f127bafcebb4f23c5180d8773b0a24d7b35baeec1afc77ca977df2aa4a54133437399fbcfac546c09e6f7b854a7c85a21f6a4f4c9bbc4a93f314cad260a605b98256ee392f519560fdce0b3c44e2e5639627e244b17f54a2595273d6ab833f82786c57cc963f0d9af2e65a170ac440ec7cc2390fcf77f0eb69a7692ec672c16b1aa6d416b7f329414cb5347c97c6dde6c6"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x1, 0xbb, "a8463b4a04f18b4675559adbef0eee92f0c513357ab55fa8b57695ada6ecaca21b63e1b8b063b1372221a3188e07e7ad24e5fb92ef951e72cbba96819a19c91bac683da7c72b13859425012aed949baa7c51f22436640fe3acf2ebf669ea4dd00636195364d20a2c9eb2be9809a06922b42d396a912efb119308ee9175ed65ae2a2b859bd114805daa2d8c043ea0d94c2ce4e19c2d9a9399ee5f01288938135b04f61c9b654cce4fb3744a8ed40d1c592e47b4aaebae88a53b5510"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x8}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m23.283907754s ago: executing program 7 (id=2861): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)=0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno']) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000008000080"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000008000080"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BLKRRPART(r0, 0x125f, 0x0) 4m23.123488773s ago: executing program 7 (id=2864): madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x11) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/146, 0x92}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000100)=""/203, 0xcb}], 0x3, 0x8b20, 0x1ff) mbind(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x3, &(0x7f0000000240), 0xfffffffffffffffa, 0x3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x8, 0x7, 0x8, 0x5c21, {{0x11, 0x4, 0x2, 0x2c, 0x44, 0x64, 0x0, 0x1, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x2f, 0x1, [{0x7, 0xe, "30a479f2e0ebaabad4d67d12"}, {0x1, 0xb, "c8c53bbda337465c80"}, {0x5, 0x10, "c6e11d638fb32b41f1ac409e321a"}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x47, r1}) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000380)='net/xfrm_stat\x00') (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) unlink(&(0x7f00000003c0)='./file0\x00') shmget(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8c6f, 0x26}}}}, [@NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x37}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc801}, 0x2000c004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r6, 0xb19, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x68d}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x401}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xf, 0x13, [{0x60, 0x1}, {0x1b}, {0x24, 0x1}, {0x48}, {0x5, 0x1}, {0xb, 0x1}, {0x30, 0x1}, {0x16}, {0x36}, {0x24, 0x1}, {0x12}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c005}, 0x4080) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r6, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6e}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x9, 0x2, 0x0, 0x9}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb0}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) getpgrp(r2) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x108, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4040004}, 0x4) (async) ioctl$IOMMU_VFIO_GET_API_VERSION(r3, 0x3b64) r8 = accept4(r3, &(0x7f0000000a40)=@generic, &(0x7f0000000ac0)=0x80, 0x80800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r9, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x8c, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r6, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f00), r3) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000001000)={&(0x7f0000000ec0), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x6c, r10, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_FAMILY={0x5, 0xd, 0x22}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) (async) sendmmsg(r8, &(0x7f0000002b40)=[{{&(0x7f0000001040)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x80, &(0x7f0000001240)=[{&(0x7f00000010c0)="141a4f924cc8d8823f8b65bb28c9b090611ff861fcaa69c7d45ea95d0dd50139f81708a10467cfbbea5dd435e530ce60a799b297ab6644f7785bfeb060d4550ddcbf806752e557844b931cdf7c44b0355fbff8b4b705f6a168aa93ceed51c6541af411680a23e8bc3bc034e54c1d4827bb363546be83d092e8540cb4ae8a4e9bb4032700d09bca2004d5db7f591a541a6c7249b8dda755342d38d45bf4834244cf00dc2b40068e3a9920ad6aba7766f9e60032ed6684880bc035ab8423916d0352548a83dfdb1f8936478ec3a78bedf1ab337f121855f2452cefa797c8795c2dd4b905e1fbf4dff581ddd7f37d7f799eb9d0", 0xf2}, {&(0x7f00000011c0)="d31d091b5667eac1e1619f06555681d40b49fa8defc72ec40b7284f052782ebe36c994938bb3cb989037e6da54273d3e7856bc595061e6a3ae17f2e2370279359a47ee724f427f70ee915f1dce2ac0af6e83993358b6fbe23c78606586131c0f8915bf1e0c", 0x65}], 0x2}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001280)="11a29fd787418ce89f0a2aa3114734592c667f09078756b278ef7848070e", 0x1e}, {&(0x7f00000012c0)="583782b457a63f96c52b58e026de39ed89a51bb437401b12fc86b18f979191fc36ead2", 0x23}], 0x2, &(0x7f0000001340)=[{0x108, 0xff, 0xff, "bed0d2503c73326ebceb119f43c0f0c7824650619adb1b2a9093d5bda573f459518b151105213e11d322a02faa9e972d94ff0e52afdc154cf3c3e630cd58334db3122f89c46aff44254219d9865043c3bc3f145c58cc25c667c15b3786f8130bccdf50fb17ee9c25b18c4ce149d3ee29a6c71a5bebaa71183bd8f23958f5f536932056eb437692ae0098095bc9a87cc097ae909cb21b1fa0b885abe620c1c6abc1454e9b119b7a888a142e8d7bb51860e5e80c554b83c81d1ce15976db17729f49414f15ea92fd18ffa54a404c61cd6be6d9c271b386aed4a81668b564baba039ec6acd0023d4626ffaded029eba54dc8b73"}, {0xa0, 0x104, 0x3ff, "b1edefc98e769216fd43974e4f05c31de70116a68d0e1071597e8c0512ccd67907ae4b53d938b5a78fcab5df2e8ac0cc74c4f51cab1ae7e0a1972b273c0ca2f45774d5ea343c8b84370acf3607b531a9837453424dc9a971d5b9bb8b3cffdab83daa48454ad59204514958d5c4ae8c117cf3e6ec698743a6b243b09f7ef814c9e5067e990d464b92423a"}, {0x88, 0x88, 0x5, "15d8c81b6a102d7936c32b2ebfe294b4b8acf31906e0811a25b13b77439ab70a40db8ad9ca3e93fc981fdff3e3d796ae7c9fe0ff4e61ad53c734ca0254b118a0fda8654c79a0c617972d784edb03052ec835c1f5061ec3397685848f7a6a71215fdf28b9382962780e5289b1d76466a032578f"}], 0x230}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001580)}, {&(0x7f00000015c0)="298974315676159d40a054df83a832299df1089dfd3f87ffeaa1859ad01aef2fb08a63a2fa18cf7bd2e7aadcbe67774a728f792c5cc72de3675226c3b8ce09d8de2a62e2d1b76ae0cac006bb041335289c424426928a3ddbe091a4cc2b7fc0ca80bff198a6e4b0ae2fe1dc2d926921806ace7efbfe6ea981b7856551ce2897acf77a068decbd2361de35fe78c8d31f26aa8b045afcd942c75f8f534653bd136ff27b21a911117818e06da1dd52abaa4f82107a080658ca26fe7bcbe0dee2f2cd1c899fb109674a52178a39a08d202ac039e7d16f8b411ef8fb7938d07261d6f50f72b196cb7a51e096bfa46e2097474a3b3cafc0", 0xf4}, {&(0x7f00000016c0)="a241c33d90058908a212bc4c72f67edb58e6a7049b55f9f97b9373cbc446410813b540469f20cf0a009484cbcb0fb0c636d492b8ed5034d4a9324f511072fd5615a1d29598de5c22cc27fd03b2af30001f5c32b3ebbb0a58bbc5cef3f05864cd6823620f55c1c7311d29b3e8d235a2fb96596c97b79901f9c779cb", 0x7b}, {&(0x7f0000001740)="5c8b3f78e4c10ab7533695455fea2a16e54f4a19e3aca25e701cee20cc643ac977415b6bae6b052ef97da39bfecd5123a64a18801b1a8f462e7551193ac16b7ea315c9613842668bdebd264369fde3904afe7c6aaf1a4ad9f3abd8d49b23acf855fa8c8ca9224068807e02b1635ae747545c880928f36f939e9095d8a4266a42bf9357c118d9c9205c0e8ae4f347ef9c474b45e1d5c0d6b0e57ceb79a96ac912d67d29b993fbcccf20fb4d2dac13c96cac8d81b37c57decd991ee50399b39300d0a6cc5597cc2e73d4c34f14a470b1f09b", 0xd1}, {&(0x7f0000001840)="034aa3ea670ef9308d9e350a3ff98b429e12d1cec4fe82443aff49676d010d09784292fef3f1ce0e3251e511bca2e538df0767d18830a952dc6e0de4a0d85e", 0x3f}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="9febd542632ab773f229e571be9aa61578843750be900298dbff636596d2d9321f0098c2312aa424f3b776df82a86204e6002b0aa221db96e02b56e983b03cc97cd7836f2f4268befbd4c5a2502c0d378d84dbcc835bf020c963897f93866fae9c74e5542ad230b4c63ffc817ccfea156f024e784df2e7353ec807d91c1bb0c5e6edf1c95951b4938093955f72513b7246760e6e382c9d27ebd8d7a2e96ed858b7", 0xa1}], 0x7, &(0x7f00000029c0)=[{0x28, 0x10d, 0x70, "a2343b51ac129ce2220f47dbb47f58145e421a0d"}, {0x10, 0x113, 0x2}, {0x68, 0x104, 0x8, "bf4edeb4e0f38519d4306e47e0ff5ec378b3374275b2438000dd041e53d0ca4ddba165b3d63a9393efd470ef1d7662de79a4c1dc7b643715d89ba928a470e7395a308cf65cfcf17a8fe2bebac47b40a287a2638f899de5"}, {0xc0, 0x109, 0x0, "6d8eab37ae2fab5c87305953649b99b674336105e4e1e4cc8f0ad0839798b412bf5b26a0771d743ad221a1c790198fece71b9781e2e937ff78e56feec42ae5c085648dddb0722551a48e528f34090880cbbeed0de1938b06f62ac3a5ca4dabcb68139c56842f9417f0fadac3351b4579d1b0256694ea1cef03ffe61fc7536050aa6adf970a7a3f19243ed20cffba3059a2f518cec5b5ca7725ee5932a5f9ea6f08027c82c662842b754961"}], 0x160}}], 0x3, 0x60004800) (async) sendmsg$nl_netfilter(r8, &(0x7f0000004100)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000040c0)={&(0x7f0000002d80)={0x1320, 0x12, 0x7, 0x201, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x7}, [@generic="d683474890b8a301cddf87673f36d7d1fb1bd0b835ac9dd401f1ba2447f6477dc2ac7c0a73ad65719f24ae6d32cad5ba7dc6f47f26bfc14db6817aac682a1c0a63a53b0a6769e76973dedc7dc8727f2532ba8af28c30088869e56503ba485ee9be7a90effcf7754b29da5ffb1873e01aa426", @nested={0x38, 0x13d, 0x0, 0x1, [@generic="b4ac5fc4d5dc1f957f4e9a58f38c0b0c7311d407944c7553baffbbb67e24c8d981dac63b595cc14474c3f9d4d0bd5713714cd720"]}, @generic="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", @generic="6400abb470f87ee59a7f7fe9db59150119438167b5ee2f2084136246d3084b4a72732f019ea4076e627fe7fe390816132690937d21bfb1b3a66df9ab545883a2", @generic="03728445e5260eae93248262a06cb678d6985ce7da7776f590e60c713d6ee53b0bc170c2f22c79b73c3cac1a911957275376efd5a192c15b2b388370fd08afd3fcb9ef932e8a5607d081bff2d92c29a254ff0d1e6924b86abee7bbba59d6b2c01fd2c3c8ac3f54c0516d6486b6d19ddcda0cd80f417ffdd747263caaef023989895509c500551c9e2ef297efcfeb6d67d2d0", @nested={0x188, 0x55, 0x0, 0x1, [@nested={0x4, 0x123}, @typed={0x8, 0x37, 0x0, 0x0, @u32=0xdd4}, @generic="c6b4c19018aa8ce61b370de04b82742764f922036761ffea6a95ea60bcbe3db49c55156f00a92c9345d634331a0dce0203d670ef68483c2724be1e6a5a93861fc30665f7b97e4aa43cb22c517105f78bbcea95d0a1b4b4b794580f756f2a6672bbf8aae4de2d100dc4df81f5ea5b416f6bbc5b20b3a3631caafe31b6", @typed={0xd4, 0x72, 0x0, 0x0, @binary="7bad2683710bee53a9dab881a115ee36726ddc8f1c0ed616eb4a7acc55a7abbbf745eba1a8c4439fde4e31a08a59293fb4cef7df3a69b74bc8144d0f5392162be8414c9e0365de4cda9a448be0b74c92e24c147364e951cebe7c699bec191acb3b7586f57f3d7c230e508bbdc12fb4772fd714ead522c63153a716b1c037d8faa8853f117ba36f58e295dcf5eaaa4c248178aa8aca61df26afdf9fe0c9adf4e83d318acf55cda02b1736a65621c4f5f5f3e8be1358889f895d43a5a6ae962259e9f4dcd2665ce1ff80f45021d0165fb4"}, @generic="b968843bd0304f209d8f10aa5929b9f1911c61ea182ff84074e31610", @typed={0xc, 0xf8, 0x0, 0x0, @u64=0x9}]}, @typed={0x8, 0xb, 0x0, 0x0, @uid}]}, 0x1320}, 0x1, 0x0, 0x0, 0x40000}, 0x6) 4m23.080732916s ago: executing program 7 (id=2866): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x56c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xb) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r2, 0x6f000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000fa7000/0x3000)=nil, 0x3000}, 0x1}) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x1, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) fcntl$notify(r3, 0x402, 0x1a) fanotify_init(0x2, 0x1000) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6ee}}, './file2\x00'}) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x861, 0x9}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000a40)='./file2\x00', 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x240, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x4a0542, 0x2a0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2000, r7}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x200000, 0x0) ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f0000000140)={&(0x7f00000000c0)="7b17a8e8867e29132baa1ac773165af0b683335669b71e3d9490164d120bc58650b4da668a7eb62c0e9136d11901523fc02039489dfe6c7e", 0x38, &(0x7f00000001c0)=""/118, 0x76}) sendfile(r1, r0, 0x0, 0x7fffefff) fadvise64(r0, 0x9, 0x9, 0x2) 4m22.955878309s ago: executing program 7 (id=2868): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x20}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xb1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x2c}}, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) 4m6.57079811s ago: executing program 38 (id=2868): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x20}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xb1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x2c}}, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) 7.911891835s ago: executing program 6 (id=4853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fcntl$notify(r4, 0x402, 0x1a) fanotify_init(0x2, 0x1000) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x861, 0x9}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000a40)='./file2\x00', 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r5, r2, 0x0, 0x7fffefff) fadvise64(r2, 0x9, 0x9, 0x2) sendfile(r2, r2, 0x0, 0x7ffff003) 7.547197915s ago: executing program 8 (id=4856): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x8) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x10183) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, r1, &(0x7f0000000000)) getpeername(r3, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r6, r6, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x301000, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r7, 0xc0305615, &(0x7f0000000200)={0x0, {0x6}}) 7.267040127s ago: executing program 6 (id=4861): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x1, {0x2, 0x1, 0x1}, 0xff}, 0x18) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r3, 0x2, {0x0, 0xff, 0x1}, 0xfd}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 4.195877478s ago: executing program 8 (id=4863): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r1, r0, 0x0, 0x7fffefff) (async) fadvise64(r0, 0x9, 0x9, 0x2) (async) sendfile(r0, r0, 0x0, 0x7ffff000) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, 0x0, 0x0) (async) getsockname$packet(r2, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ptrace(0x10, r3) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = getgid() setregid(0x0, r9) r10 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000080da13c805d467667bb4ff54d33fb8508fdd38245e5b05c2931b38a501d8b4690ba584b97d7c25334c1c6e106329b9a1bdea30e585b4953b181c9db9e41479a9c5867f3169b1", @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r11, @ANYBLOB="0c009900ff070000780000001400040073797a6b616c6c65723000000000000008000500070000000500530000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x9, 0x3032, 0xffffffffffffffff, 0x1263b000) (async) creat(&(0x7f0000001380)='./file0\x00', 0x12c) mount$9p_rdma(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@aname={'aname', 0x3d, 'trans=rdma,'}}]}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) 3.800029683s ago: executing program 6 (id=4864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000000280000000400000000000000100006000000000020"], 0x24, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x8500017e) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$alg(r0, 0x0, 0x2e, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x400000000000, {0x1, 0x1, 0x2}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x1bb) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x0, 0x7, 0x0, 0x300, 0x0, 0x20206, r7}) r9 = socket(0x400000000010, 0x5, 0x0) write(r9, &(0x7f0000000040), 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') exit(0x1ff) lseek(r10, 0x4, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r11, 0x0, {0x0, 0xff, 0x4}}, 0x18) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) 3.064097962s ago: executing program 2 (id=4867): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2.879475418s ago: executing program 6 (id=4868): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4010, r1, 0x54fe8000) (async) sendfile(r1, r1, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 2.361221305s ago: executing program 8 (id=4869): openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket(0x2c, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbb, 0x1010, r0, 0xb4489000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r3) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000f, 0x4000010, 0xffffffffffffffff, 0xfa297000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)={0x2, 'team_slave_0\x00', {0x800000}, 0x9}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000940)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) sigaltstack(0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xa}, 0x31, 0x80, &(0x7f0000000140)="f2ccc736aa468ea45cc6426f4f258a85199b43ff2dd33ffe4c966d951f1046bf8ec5a6c56281674f92f7a005ee2103947412bee74e4c12ff32c00be1e06a9b84bf17c6abdce8dfe12a8e3f9a29a1216ece5e3f76b64e032de8d306a5a850adb1fdc65240589aa107aafafaeced08f93e52a66da790206bee4c25a915634a229278da0ed292a03100", 0x88, 0x1, 0xfffff001, 0x0, 0x2, 0xfff, &(0x7f0000000200)="739a30a937885c677c9f182087c535f8ea6706ae97567b984505982a6b5044d1eff30997e95b98fb614439852ad755c32ffff0ea6cd719cc48753d0668237c9e3f77c5143a8f74573cbc3f7cc0ea11e1d4d03ccbb45aca96575af92660d253611c942d780b9e2d2eeff37899f97447eb2e47b7e0932b092a57e4d8e28f6b7ff7f804441694936ea6ad4d526c3ae9348aab2fd51179eb53a7ec76c9a9e44f5b70e3d405a5884db518b148a8c3ab22572d8bb634456e391e0e0ff31f19a1cb4a1d4bcafd06edbbbeb2e2373671"}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) mlock(&(0x7f00001fa000/0x3000)=nil, 0x3000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) 2.184141714s ago: executing program 8 (id=4870): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSIG(r0, 0x40045436, 0x35) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) fadvise64(r1, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000000)) 2.002885119s ago: executing program 2 (id=4872): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x174, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x0, @in=@multicast2}]}]}, 0x174}}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x1}) r3 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r3, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x844) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2c39000) 1.882574013s ago: executing program 6 (id=4874): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000000280)={0x0, 0x0, 0xb, {0xb, 0x31, "1ff43bb8576c3271aa"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f0000000840)=ANY=[@ANYBLOB="2008ed0000000fc1de58876bde502ec00c888aca8d29b73bc3d6659555335a4c17d35e4f07245dfa45ec30a503fd31f733fc55fb906bf7d2ba00aebb99acbc5b09a74da358ab04752c41027e81b14d5f05c23ed4e7ed3baa17b365c3f4eae2e05d9542f43ce2453f2c163d26d7f237d0ce2afa5e2cee24bba90c75cb8d45203d96148192744cb89016d1a8ad2d70ae489ed1bd28b89444f0349ca048a99ec287dc5b3c01285a7e2cf9788cd134e99767836848198dda49f78c1c4e70327c18fb4754e407d5868bc95240366e4f32bb8cc124943bfc39d8f4e6e647070fce3cb88c3380fa0455f8bde2c977521065835017a6cd9c4f"], &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x81, 0x5, 0x1, 0x3ff, 0xf, 0x1, 0xa81c, 0x0, 0x8000, 0xfffe, 0x2, 0x7ff}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0xc}, &(0x7f00000004c0)={0x20, 0x83, 0x2}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x81}, &(0x7f0000000540)={0x20, 0x89, 0x2, 0xfff8}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0xf24, @private1, 0x7}}, 0x9, 0xfe}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r1, 0x2c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x401, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000240)=0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84400, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000640)={r1, @in={{0x2, 0x4e20, @loopback}}, 0x6, 0x0, 0x6, 0x8000, 0x3, 0xe, 0x8}, &(0x7f0000000700)=0x9c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0xa0, 0x4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, &(0x7f0000000080)={"5fe06023425fa8cc2d9cc9df672e6b1f6695f504d97bb62a223265edd5c3", 0x3f}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xf, r5, 0x800, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, &(0x7f00000000c0)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0x8004510b, &(0x7f0000000080)) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000600), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) 1.859149621s ago: executing program 9 (id=4875): mount(&(0x7f0000000080)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x1200000, 0x0) 1.724030187s ago: executing program 2 (id=4876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000280)=0x5) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_pidfd_open(0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, 0x0, 0x0) process_mrelease(r1, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 1.722727654s ago: executing program 9 (id=4877): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xdd) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 1.0294801s ago: executing program 8 (id=4878): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = socket(0xda416382ee804ee7, 0x4, 0x2000) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88400) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r5, 0x0, r4}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) poll(&(0x7f00000004c0)=[{r1}], 0x1, 0x10001) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x100000, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000000)=[@exit_looper, @release, @exit_looper], 0xc1, 0x0, &(0x7f0000000080)="f92b6b2798083b1a2c4b5a9b692766b832e6ef910d7b27658f253cb0a6c9a95ee45a4b2e38856f453c442572837dd49c3a2506ee0b3ddbe18f6d9f6a7372cd3ad3de6c4799646204f806f8755946b02b4963eb74370395a62e011a488b992883477ba2c9c218dd507f66829f412e413f84852547c1ae9f562e322306ccb562435f99292fab045ae07bf61cf812925c95437431693d8f6cd1878c00ea03c54abba80cf61e4fc2f4f72545c1aa93b8335cee084ca86fa9f06ed1f3daaa3e981514f9"}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f00000001c0)=""/62, 0x126000, 0x800, 0x80000003, 0x4}, 0x20) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x200000}, 0x1c) shutdown(r6, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast2, 0x9e9}}, 0x12, 0xff81}, 0x90) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r7, 0x2000) r8 = accept$alg(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) fcntl$setsig(r1, 0xa, 0x30) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x410102, 0x0, 0x11}, 0x18) read$alg(r8, &(0x7f0000000240)=""/223, 0xdf) 802.563628ms ago: executing program 2 (id=4879): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @none={0x300, 0x2}}, 0x14) mount(&(0x7f0000000180)=@sr0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 700.053235ms ago: executing program 2 (id=4880): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a503, 0x4008032, 0xffffffffffffffff, 0xd164c000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84400, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x3, 0x80, 0x7, 0x80000, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x22052, r0, 0x4b5f4000) 679.798938ms ago: executing program 9 (id=4881): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) (async) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fcdbdf253b00000008000000000000000000000000008700"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x801) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, 0x0) poll(&(0x7f0000000140)=[{r5, 0x20}], 0x1, 0x0) accept4$inet6(r6, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x80000) (async) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f00000002c0)={0x20, r8}, 0x0) (async) landlock_restrict_self(r7, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 647.400142ms ago: executing program 9 (id=4882): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) r1 = socket(0xa, 0x3, 0x3a) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000080)=0x800, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r4, 0x221, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1, 0x0, 0xc08, 0x2}) fcntl$lock(r5, 0x6, &(0x7f0000001340)={0x0, 0x1, 0x2, 0x7}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x28, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x15}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x1) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000000)={@empty, @dev}, &(0x7f0000000040)=0xc) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x26}, 0xc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 452.148127ms ago: executing program 2 (id=4883): prlimit64(0x0, 0xf, &(0x7f0000000000)={0x6, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 451.455314ms ago: executing program 9 (id=4884): r0 = socket$inet(0x2, 0xa, 0x40) (async) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000000)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xc4, 0x5a5, 0xff, 0x1, 0x6, 0x101, "b351aea4a934a76ff7245cf2003bd860d07b6c34dcef7c7d0f6ff173df86a5862416931d1c4625129ea6379041220bdbe3fa57304662d94f0884b1aacf271f1bd0424be051b1d125b0cbbc5c92a02aaa255d66c24bdb71177f99ee0277b5b8621553c9852a07f6c450b2c7a0e872aa4fac48cf6f4403161f8353a5d8603b9c912b760672783412fe017f3527451d9ef4516f3651552284c65b5ec12b501e9b669120e1688d2e039907dc866466b1dcb41e48aa187a265909f25a6db7c03de6a6672efa0b"}}, 0x1dc) (async) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x400000, 0x100, 0x8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000002c0)={{r2}, "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"}) openat$rnullb(0xffffffffffffff9c, &(0x7f00000012c0), 0xa0000, 0x0) (async) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000001300)) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001380)={0x110, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc8b}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x400}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1000}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) (async) r3 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x2}, 0x0, 0x0, 0x0) request_key(&(0x7f0000001540)='rxrpc_s\x00', &(0x7f0000001580)={'syz', 0x0}, &(0x7f00000015c0)='\'$-\x83\x00', r3) (async) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0x28, 0x0, &(0x7f0000001680)=[@free_buffer={0x40086303, r4}, @free_buffer, @decrefs={0x40046307, 0x2}, @increfs={0x40046304, 0x2}], 0x9d, 0x0, &(0x7f00000016c0)="96cbdc0a21f9ea9e20febb4aa7d093a44577c8a87e60d465ca85f7040137b36867b4f82946a3186987a1a271a15ed0ae029d4e013eab85e4d0c481c083dadaa773c05982aceb3a07abd3042dfd6bc0abe936e3a9cdaa1bd19cf84d33df9ae0be06074276eceadb942c353676c8e26122e0361db53eca9d56620443d344ca07264a3c38bb87d1606c1ee584ca9750ec8bcdb9112385c95ba007a9405c24"}) (async) r5 = socket(0x29, 0x6, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, r7, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x4001) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000001900)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x7, 0x2, 0x5, 0x3}, &(0x7f00000019c0)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000001a00)={r9, 0x2}, &(0x7f0000001a40)=0x8) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000001ac0)={0x4, &(0x7f0000001a80)=[{0x3, 0x39, 0x7, 0x2}, {0x6, 0xb, 0x7f, 0xee2f}, {0x3, 0xf7, 0x2, 0x101}, {0x7, 0x8, 0x1, 0x2}]}) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001b00)=0x1) sendmsg$can_bcm(r5, &(0x7f0000001c40)={&(0x7f0000001b40), 0x10, &(0x7f0000001c00)={&(0x7f0000001b80)={0x2, 0x0, 0x1, {}, {0x77359400}, {0x4, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "38acc039e4817e30e8b4365193f455cc954dd7a8dcaaabeb4a4cb164131ba73db83220a548264a38bce6ccee4332764fdd4a2dec73a33dd2be98ca48500a5392"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x8040) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001e40)=0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001e80)=0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001ec0)=0x0) r13 = getpid() syz_clone3(&(0x7f0000001f40)={0x80, &(0x7f0000001c80), &(0x7f0000001cc0), &(0x7f0000001d00), {0x2a}, &(0x7f0000001d40)=""/24, 0x18, &(0x7f0000001d80)=""/154, &(0x7f0000001f00)=[r10, r11, r12, r13], 0x4, {r1}}, 0x58) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000001fc0)=0x400, 0x4) 410.429266ms ago: executing program 9 (id=4885): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x4, 0x2, 0x0, 0x9, 0xfffd, 0x7f]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000000) getdents(r0, 0x0, 0x0) lseek(r0, 0x200, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) ioctl$BLKRRPART(r4, 0x125f, 0x0) 346.758735ms ago: executing program 6 (id=4886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0300080001001fe1689c7ca33927f57cabae71e378000000001400000045000190780a010100ac1414aa0c04907810030000451f00080068000100840001ac1414aaac1e010144145693ffffffff0000000b64010100000000080000cc7f080001ffffffff83080e3b1d35dd970044143381ac140000000964010100000000070000000051569e2556a5f44cd30d29abc428632e924c14761f96b0453f489bc4c480016d0ef396f8c7bce7a8060c683389e74a73cdf2f82a4f7b70b76ff485623778"], 0x7e) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002880)={0x118, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x106, 0x3dff, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @str='\'\x11(m&!#+\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x118}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x800, 0x0) ptrace$setregset(0x4205, r0, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)="6001f103fba2e558f5cd89ead67bc26f97fa88f0444f32acd761ff1ab9c698336027a391addced2cbb313dd938321422dd51ac0bd4a75f2dff05ada7a51619bcd9c63e73abcd00eb59f4b67b0d3fbf2230e84be63bf5b346609ddf5504dccc22e49dff0eefecf2f4fb7d", 0x6a}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r5 = gettid() tkill(r5, 0x1b) syz_open_procfs(r5, &(0x7f0000000000)='cpuset\x00') sendfile(r4, r4, 0x0, 0x7ffff000) 0s ago: executing program 8 (id=4887): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x466a42, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c300"}) recvfrom$x25(r3, &(0x7f0000000040)=""/20, 0x14, 0x40012221, &(0x7f0000000080), 0x12) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0x1001) sendfile(r1, r0, 0x0, 0x7ffff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x466a42, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) (async) close(r3) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c300"}) (async) recvfrom$x25(r3, &(0x7f0000000040)=""/20, 0x14, 0x40012221, &(0x7f0000000080), 0x12) (async) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) (async) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8) (async) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0x1001) (async) sendfile(r1, r0, 0x0, 0x7ffff000) (async) kernel console output (not intermixed with test programs): : device descriptor read/64, error -71 [ 651.837152][ T5867] usb 9-1: Using ep0 maxpacket: 32 [ 651.844912][ T5867] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 651.853589][ T5867] usb 9-1: config 0 has no interface number 0 [ 651.859974][ T5867] usb 9-1: config 0 interface 184 has no altsetting 0 [ 651.869204][ T5867] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 651.878687][ T5867] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.887168][ T5867] usb 9-1: Product: syz [ 651.891645][ T5867] usb 9-1: Manufacturer: syz [ 651.896321][ T5867] usb 9-1: SerialNumber: syz [ 651.902753][ T5867] usb 9-1: config 0 descriptor?? [ 651.911323][ T5867] smsc75xx v1.0.0 [ 651.933333][ T5986] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 652.072548][ T5986] usb 3-1: device descriptor read/64, error -71 [ 652.098201][T21781] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 652.112587][T21781] Error validating options; rc = [-22] [ 652.123854][T21767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.156830][T21784] /dev/rnullb0: Can't open blockdev [ 652.190249][ T5986] usb usb3-port1: attempt power cycle [ 652.213594][T21789] /dev/rnullb0: Can't open blockdev [ 652.387905][T21802] tipc: Started in network mode [ 652.392812][T21802] tipc: Node identity , cluster identity 4711 [ 652.399507][T21802] tipc: Failed to obtain node identity [ 652.406354][T21802] tipc: Enabling of bearer rejected, failed to enable media [ 652.493212][T21802] overlay: ./file0 is not a directory [ 652.498844][T21801] overlay: ./file0 is not a directory [ 652.550298][T21806] overlayfs: overlapping lowerdir path [ 652.553808][ T5986] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 652.565757][ T5867] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 652.571779][T21806] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 652.588607][ T5986] usb 3-1: device descriptor read/8, error -71 [ 652.596800][ T5869] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 652.606312][ T5867] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 652.621502][T21808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.634135][T21808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.842485][ T5986] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 652.867972][ T5986] usb 3-1: device descriptor read/8, error -71 [ 652.970756][ T24] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 652.992200][ T5986] usb usb3-port1: unable to enumerate USB device [ 653.131070][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 653.140034][ T24] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 653.149384][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.158063][ T24] usb 7-1: Product: syz [ 653.162229][ T24] usb 7-1: Manufacturer: syz [ 653.166981][ T24] usb 7-1: SerialNumber: syz [ 653.176417][ T24] r8152-cfgselector 7-1: Unknown version 0x0000 [ 653.182817][ T24] r8152-cfgselector 7-1: config 0 descriptor?? [ 653.276649][T21824] 9p: Bad value for 'rfdno' [ 653.375130][T21829] /dev/rnullb0: Can't open blockdev [ 653.628823][T21813] Invalid ELF header magic: != ELF [ 653.651257][ T24] r8152-cfgselector 7-1: USB disconnect, device number 95 [ 654.564762][ T24] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 654.741172][ T24] usb 7-1: device descriptor read/64, error -71 [ 654.771292][T21767] [U]  [ 654.774191][T21767] [U] K{‘ [ 654.777220][T21767] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 654.784206][T21767] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 654.800532][T21767] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 654.811271][T21767] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)޹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 654.848465][T21767] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 654.872267][T21767] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 654.883385][T21767] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 654.894967][T21767] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 655.008601][T21767] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 655.017106][T21767] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 655.030650][T21767] [U] 22½“Æ©Ðû©x?0;3u± [ 655.034897][T21767] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 655.059890][T21767] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 655.069256][T21767] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 655.077957][T21767] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 655.084123][T21767] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 655.096510][T21767] [U] ¹ ec [ 655.099692][T21767] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 655.112032][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.168119][T21766] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8寥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 655.184730][ T5867] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000304: -71 [ 655.196362][ T5867] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX+4: -71 [ 655.202939][T21873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.207006][ T5867] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 655.220052][T21873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.225694][ T5867] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 655.242086][T21873] /dev/rnullb0: Can't open blockdev [ 655.250864][ T5867] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 655.259974][ T24] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 655.267721][ T43] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 655.282326][ T5867] usb 9-1: USB disconnect, device number 53 [ 655.409181][ T24] usb 7-1: device descriptor read/64, error -71 [ 655.430226][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 655.436675][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 655.450756][ T43] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 655.459932][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.468828][ T43] usb 3-1: Product: syz [ 655.473298][ T43] usb 3-1: Manufacturer: syz [ 655.478001][ T43] usb 3-1: SerialNumber: syz [ 655.483822][ T43] usb 3-1: config 0 descriptor?? [ 655.490309][ T43] hub 3-1:0.0: bad descriptor, ignoring hub [ 655.496764][ T43] hub 3-1:0.0: probe with driver hub failed with error -5 [ 655.505743][ T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 655.526679][ T24] usb usb7-port1: attempt power cycle [ 655.707090][T21862] netlink: 'syz.2.4250': attribute type 10 has an invalid length. [ 655.718529][T21862] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.728453][T21862] bond0: (slave team0): Enslaving as an active interface with an up link [ 655.739533][T21862] tipc: Trying to set illegal importance in message [ 655.860121][T21902] netlink: 'syz.8.4253': attribute type 1 has an invalid length. [ 655.868963][T21902] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4253'. [ 655.900951][ T24] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 655.923377][ T24] usb 7-1: device descriptor read/8, error -71 [ 655.990649][T21908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.004091][T21908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.018818][T21908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.030231][T21908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.042635][T21908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.052554][T21908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.179475][ T24] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 656.206464][ T24] usb 7-1: device descriptor read/8, error -71 [ 656.329030][ T24] usb usb7-port1: unable to enumerate USB device [ 656.523373][T21926] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.4257'. [ 656.533726][T21926] openvswitch: netlink: Message has 512 unknown bytes. [ 656.811219][T13280] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 656.966562][T21938] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4260'. [ 656.977383][T13280] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 656.985652][T13280] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x26, changing to 0x6 [ 656.997154][T13280] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 114, changing to 7 [ 657.008489][T13280] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 33260, setting to 1024 [ 657.019757][T13280] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 657.032900][T13280] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 657.042152][T13280] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.054872][T13280] usb 9-1: config 0 descriptor?? [ 657.062707][T13280] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 657.091397][T21947] netlink: 'syz.9.4261': attribute type 75 has an invalid length. [ 657.101877][T21947] /dev/rnullb0: Can't open blockdev [ 657.108376][T21948] netlink: 'syz.9.4261': attribute type 75 has an invalid length. [ 657.252092][T21964] /dev/rnullb0: Can't open blockdev [ 657.305570][T21968] /dev/rnullb0: Can't open blockdev [ 657.330860][T21971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.341094][T21971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.376594][T21977] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4269'. [ 657.834076][T13280] usb 3-1: USB disconnect, device number 5 [ 658.004875][T22025] tipc: Started in network mode [ 658.020569][T22025] tipc: Node identity 52655316e4e, cluster identity 4711 [ 658.037446][T22025] tipc: Enabled bearer , priority 0 [ 658.433838][T22024] tipc: Disabling bearer [ 658.555010][T22043] /dev/rnullb0: Can't open blockdev [ 659.317171][T22059] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 659.324370][T22059] /dev/rnullb0: Can't open blockdev [ 659.512423][T22063] netlink: 'syz.2.4286': attribute type 10 has an invalid length. [ 659.520765][T22063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4286'. [ 659.530570][T22063] batadv0: entered allmulticast mode [ 659.536479][T22063] bridge0: port 3(batadv0) entered blocking state [ 659.543514][T22063] bridge0: port 3(batadv0) entered disabled state [ 659.562208][T22063] batadv0: entered promiscuous mode [ 659.574879][T22068] /dev/rnullb0: Can't open blockdev [ 659.574966][T22063] bridge0: port 3(batadv0) entered blocking state [ 659.586776][T22063] bridge0: port 3(batadv0) entered forwarding state [ 659.674296][T22081] fuse: Bad value for 'group_id' [ 659.695386][T22081] fuse: Bad value for 'group_id' [ 659.786696][ T5922] usb 9-1: USB disconnect, device number 54 [ 660.033375][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 660.044051][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 660.216081][T22130] /dev/rnullb0: Can't open blockdev [ 660.787977][ T5867] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 660.975753][ T5867] usb 9-1: config 0 has an invalid interface number: 153 but max is 0 [ 660.987647][ T5867] usb 9-1: config 0 has no interface number 0 [ 661.004205][ T5867] usb 9-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 661.028485][ T5867] usb 9-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 661.050493][ T5867] usb 9-1: config 0 interface 153 has no altsetting 0 [ 661.062036][ T5867] usb 9-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 661.078250][ T5867] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.097957][ T5867] usb 9-1: Product: syz [ 661.108049][ T5867] usb 9-1: Manufacturer: syz [ 661.117759][ T5867] usb 9-1: SerialNumber: syz [ 661.132173][ T5867] usb 9-1: config 0 descriptor?? [ 661.150898][ T5867] hub 9-1:0.153: bad descriptor, ignoring hub [ 661.173679][T22204] kAFS: unparsable volume name [ 661.183546][ T5867] hub 9-1:0.153: probe with driver hub failed with error -5 [ 661.216198][ T5867] sierra 9-1:0.153: Sierra USB modem converter detected [ 661.433513][T22230] /dev/rnullb0: Can't open blockdev [ 661.445566][T22230] /dev/rnullb0: Can't open blockdev [ 661.472778][T22230] /dev/rnullb0: Can't open blockdev [ 661.489178][T22230] /dev/rnullb0: Can't open blockdev [ 661.505342][T22230] /dev/rnullb0: Can't open blockdev [ 661.524671][T22230] /dev/rnullb0: Can't open blockdev [ 661.536704][T22237] /dev/rnullb0: Can't open blockdev [ 661.557228][T22230] /dev/rnullb0: Can't open blockdev [ 661.581581][T22230] /dev/rnullb0: Can't open blockdev [ 661.640314][T22242] /dev/rnullb0: Can't open blockdev [ 661.646852][T22230] /dev/rnullb0: Can't open blockdev [ 661.655433][T22230] /dev/rnullb0: Can't open blockdev [ 661.734369][T22230] /dev/rnullb0: Can't open blockdev [ 661.735602][T22230] /dev/rnullb0: Can't open blockdev [ 661.736959][T22230] /dev/rnullb0: Can't open blockdev [ 661.738478][T22230] /dev/rnullb0: Can't open blockdev [ 661.739107][T22230] /dev/rnullb0: Can't open blockdev [ 661.740406][T22230] /dev/rnullb0: Can't open blockdev [ 661.740966][T22230] /dev/rnullb0: Can't open blockdev [ 661.742735][T22230] /dev/rnullb0: Can't open blockdev [ 661.743264][T22230] /dev/rnullb0: Can't open blockdev [ 661.744914][T22230] /dev/rnullb0: Can't open blockdev [ 661.745451][T22230] /dev/rnullb0: Can't open blockdev [ 661.747758][T22230] /dev/rnullb0: Can't open blockdev [ 661.748828][T22230] /dev/rnullb0: Can't open blockdev [ 661.749794][T22230] /dev/rnullb0: Can't open blockdev [ 661.754195][T22230] /dev/rnullb0: Can't open blockdev [ 661.755743][T22230] /dev/rnullb0: Can't open blockdev [ 661.756720][T22230] /dev/rnullb0: Can't open blockdev [ 661.757285][T22230] /dev/rnullb0: Can't open blockdev [ 661.759072][T22230] /dev/rnullb0: Can't open blockdev [ 661.759643][T22230] /dev/rnullb0: Can't open blockdev [ 661.760276][T22230] /dev/rnullb0: Can't open blockdev [ 661.763370][T22230] /dev/rnullb0: Can't open blockdev [ 661.763985][T22230] /dev/rnullb0: Can't open blockdev [ 661.772817][T22230] /dev/rnullb0: Can't open blockdev [ 661.773444][T22230] /dev/rnullb0: Can't open blockdev [ 661.774037][T22230] /dev/rnullb0: Can't open blockdev [ 661.774585][T22230] /dev/rnullb0: Can't open blockdev [ 661.775186][T22230] /dev/rnullb0: Can't open blockdev [ 661.775675][T22230] /dev/rnullb0: Can't open blockdev [ 661.776244][T22230] /dev/rnullb0: Can't open blockdev [ 661.776808][T22230] /dev/rnullb0: Can't open blockdev [ 661.777357][T22230] /dev/rnullb0: Can't open blockdev [ 661.777912][T22230] /dev/rnullb0: Can't open blockdev [ 661.778452][T22230] /dev/rnullb0: Can't open blockdev [ 661.779016][T22230] /dev/rnullb0: Can't open blockdev [ 661.779604][T22230] /dev/rnullb0: Can't open blockdev [ 661.780152][T22230] /dev/rnullb0: Can't open blockdev [ 661.780751][T22230] /dev/rnullb0: Can't open blockdev [ 661.781395][T22230] /dev/rnullb0: Can't open blockdev [ 661.782138][T22230] /dev/rnullb0: Can't open blockdev [ 661.783239][T22230] /dev/rnullb0: Can't open blockdev [ 661.783823][T22230] /dev/rnullb0: Can't open blockdev [ 661.784391][T22230] /dev/rnullb0: Can't open blockdev [ 661.784956][T22230] /dev/rnullb0: Can't open blockdev [ 661.785542][T22230] /dev/rnullb0: Can't open blockdev [ 661.786210][T22230] /dev/rnullb0: Can't open blockdev [ 661.786870][T22230] /dev/rnullb0: Can't open blockdev [ 661.787449][T22230] /dev/rnullb0: Can't open blockdev [ 661.788062][T22230] /dev/rnullb0: Can't open blockdev [ 661.788604][T22230] /dev/rnullb0: Can't open blockdev [ 661.790208][T22230] /dev/rnullb0: Can't open blockdev [ 661.790792][T22230] /dev/rnullb0: Can't open blockdev [ 661.791581][T22230] /dev/rnullb0: Can't open blockdev [ 661.792537][T22230] /dev/rnullb0: Can't open blockdev [ 661.793302][T22230] /dev/rnullb0: Can't open blockdev [ 662.139389][ T5867] usb 9-1: USB disconnect, device number 55 [ 662.486279][ T5867] sierra 9-1:0.153: device disconnected [ 663.044432][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 663.060537][T22299] ALSA: seq fatal error: cannot create timer (-22) [ 663.183409][ T9] usb 3-1: device descriptor read/64, error -71 [ 663.443993][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 663.589725][ T9] usb 3-1: device descriptor read/64, error -71 [ 663.707505][ T9] usb usb3-port1: attempt power cycle [ 664.071169][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 664.094718][ T9] usb 3-1: device descriptor read/8, error -71 [ 664.348925][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 664.370758][ T9] usb 3-1: device descriptor read/8, error -71 [ 664.455822][ T5922] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 664.488404][ T9] usb usb3-port1: unable to enumerate USB device [ 664.617744][ T5922] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 664.631199][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.644653][ T5922] usb 7-1: config 0 descriptor?? [ 665.300893][T22337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.317480][T22337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.531349][T22372] syzkaller1: entered promiscuous mode [ 665.537225][T22372] syzkaller1: entered allmulticast mode [ 665.543621][ T5922] pegasus 7-1:0.0: probe with driver pegasus failed with error -121 [ 665.716870][T22393] vcan0: tx drop: invalid sa for name 0x000003fffffffffd [ 665.837241][T22409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.849007][T22409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.858310][T22409] netlink: 'syz.8.4353': attribute type 2 has an invalid length. [ 665.866251][T22409] netlink: 164 bytes leftover after parsing attributes in process `syz.8.4353'. [ 666.081416][ T5867] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 666.233124][ T5867] usb 9-1: device descriptor read/64, error -71 [ 666.487955][ T5867] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 666.640222][ T5867] usb 9-1: device descriptor read/64, error -71 [ 666.773196][ T5867] usb usb9-port1: attempt power cycle [ 667.144363][ T43] usb 10-1: USB disconnect, device number 9 [ 667.161844][ T5867] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 667.220083][ T5867] usb 9-1: device descriptor read/8, error -71 [ 667.269121][ T5922] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 667.287256][T22463] /dev/rnullb0: Can't open blockdev [ 667.293596][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 667.301198][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 667.308499][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 667.316478][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 667.325469][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 667.429270][ T5922] usb 3-1: device descriptor read/64, error -71 [ 667.482632][ T5867] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 667.509734][ T5867] usb 9-1: device descriptor read/8, error -71 [ 667.518158][T22464] chnl_net:caif_netlink_parms(): no params data found [ 667.575327][T22464] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.582822][T22464] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.593986][T22464] bridge_slave_0: entered allmulticast mode [ 667.603857][T22464] bridge_slave_0: entered promiscuous mode [ 667.612316][T22464] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.619657][T22464] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.627527][T22464] bridge_slave_1: entered allmulticast mode [ 667.634794][T22464] bridge_slave_1: entered promiscuous mode [ 667.643488][ T5867] usb usb9-port1: unable to enumerate USB device [ 667.651128][ T6511] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.681496][T22464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.692885][T22464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.696245][ T5922] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 667.721973][ T6511] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.747639][T22464] team0: Port device team_slave_0 added [ 667.755594][T22464] team0: Port device team_slave_1 added [ 667.784792][ T6511] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.797747][T22464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.806626][T22464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.833013][T22464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.849015][ T6511] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.856633][ T5922] usb 3-1: device descriptor read/64, error -71 [ 667.866575][T22464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.874613][T22464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.901519][T22464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.940548][T22464] hsr_slave_0: entered promiscuous mode [ 667.946756][T22464] hsr_slave_1: entered promiscuous mode [ 667.956544][T22464] debugfs: 'hsr0' already exists in 'hsr' [ 667.962303][T22464] Cannot create hsr debugfs directory [ 667.978795][ T5922] usb usb3-port1: attempt power cycle [ 668.050539][ T6511] bridge_slave_1: left allmulticast mode [ 668.056370][ T6511] bridge_slave_1: left promiscuous mode [ 668.064299][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.073036][ T6511] bridge_slave_0: left allmulticast mode [ 668.078693][ T6511] bridge_slave_0: left promiscuous mode [ 668.085499][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.144621][ T6511] smc: removing net device bridge0 with user defined pnetid SYZ0 [ 668.214222][ T6511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.224436][ T6511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.234095][ T6511] bond0 (unregistering): Released all slaves [ 668.348386][ T5922] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 668.380890][ T5922] usb 3-1: device descriptor read/8, error -71 [ 668.412497][ T9] usb 7-1: USB disconnect, device number 100 [ 668.570238][ T6511] hsr_slave_0: left promiscuous mode [ 668.589911][ T6511] žåÓD`¼ê: left promiscuous mode [ 668.606896][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.614749][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.624528][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.632487][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.643949][ T6511] veth1_macvtap: left promiscuous mode [ 668.649812][ T5922] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 668.657662][ T6511] veth0_macvtap: left promiscuous mode [ 668.663547][ T6511] veth1_vlan: left promiscuous mode [ 668.683703][ T6511] veth0_vlan: left promiscuous mode [ 668.689411][ T5922] usb 3-1: device descriptor read/8, error -71 [ 668.740585][T22851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.777510][T22851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.802653][ T6511] pim6reg (unregistering): left allmulticast mode [ 668.811092][ T5922] usb usb3-port1: unable to enumerate USB device [ 668.829689][ T9] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 668.954416][ T6511] team0 (unregistering): Port device team_slave_1 removed [ 668.978561][ T6511] team0 (unregistering): Port device C removed [ 669.125928][ T6511] vcan0 (unregistering): left allmulticast mode [ 669.425380][ T6511] IPVS: stop unused estimator thread 0... [ 669.535586][ T5869] Bluetooth: hci1: command tx timeout [ 669.635873][T22464] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 669.664677][T22464] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 669.788901][T22464] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 669.907484][T22464] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 670.100428][T22464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.161261][T22464] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.194152][ T6566] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.201453][ T6566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.224639][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.231948][ T6511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.603756][T22464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.754496][ T5867] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 670.932929][ T5867] usb 9-1: Using ep0 maxpacket: 32 [ 670.947194][ T5867] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 670.968460][ T5867] usb 9-1: config 0 has no interface number 0 [ 670.983465][ T5867] usb 9-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 671.020759][ T5867] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 671.023549][T22464] veth0_vlan: entered promiscuous mode [ 671.038273][ T5867] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.058441][T22464] veth1_vlan: entered promiscuous mode [ 671.066814][ T5867] usb 9-1: Product: syz [ 671.074688][ T5867] usb 9-1: Manufacturer: syz [ 671.085493][ T5867] usb 9-1: SerialNumber: syz [ 671.111763][ T5867] usb 9-1: config 0 descriptor?? [ 671.127504][ T5867] smsc95xx v2.0.0 [ 671.134263][T22464] veth0_macvtap: entered promiscuous mode [ 671.141564][ T5867] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 671.155620][T22464] veth1_macvtap: entered promiscuous mode [ 671.175544][ T5867] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -22 [ 671.198159][T22464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.223744][T22464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.256068][ T6511] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.286469][ T6511] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.309644][ T6511] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.333270][ T6511] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.345255][T22904] /dev/rnullb0: Can't open blockdev [ 671.357326][ T5867] usb 9-1: USB disconnect, device number 60 [ 671.424745][ T6564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.444915][ T6564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.470029][ T6511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.478838][ T6511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.648522][T22958] fuse: Unknown parameter '[roup@QâÅ0xffffffffffffffff' [ 671.760693][ T5869] Bluetooth: hci1: command tx timeout [ 671.999747][T22968] /dev/rnullb0: Can't open blockdev [ 672.065161][T22978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.092989][T22978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.113334][T22978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.122405][T22978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.136437][T22981] overlayfs: failed to resolve './file0': -2 [ 672.137101][T22978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.159966][T22978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.178548][T22978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.186598][T22990] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4378'. [ 672.190292][T22978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.207186][T22981] block nbd2: NBD_DISCONNECT [ 672.209017][T22978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.225156][T22978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.235156][T22990] /dev/rnullb0: Can't open blockdev [ 672.239039][T22978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.255524][T22978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.293296][T22997] hugetlbfs: Bad value for 'mode' [ 672.300497][T22997] /dev/sg0: Can't lookup blockdev [ 673.151459][T23008] ./cgroup: Can't lookup blockdev [ 673.159713][T23008] ./cgroup: Can't lookup blockdev [ 673.218298][T23014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.243493][T23015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.261771][T23014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.264084][T23015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.292718][T23014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.312788][T23014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.340575][T23014] netlink: 'syz.6.4385': attribute type 1 has an invalid length. [ 673.376255][T23028] random: crng reseeded on system resumption [ 673.567201][T13280] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 673.745870][T13280] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.767537][T13280] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 673.793097][T13280] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 673.806149][T13280] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 673.814800][T13280] usb 10-1: SerialNumber: syz [ 673.994708][ T5869] Bluetooth: hci1: command tx timeout [ 674.051505][T13280] usb 10-1: 0:2 : does not exist [ 674.090959][ T43] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 674.212889][T23053] fuse: Bad value for 'user_id' [ 674.217851][T23053] fuse: Bad value for 'user_id' [ 674.266788][ T92] usb 10-1: USB disconnect, device number 10 [ 674.278206][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 674.294537][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 674.303191][T23061] Bluetooth: MGMT ver 1.23 [ 674.325132][ T43] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 674.360029][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 674.369797][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.377813][ T43] usb 3-1: Product: syz [ 674.380181][ T9] usb 7-1: device descriptor read/64, error -110 [ 674.390648][ T43] usb 3-1: Manufacturer: syz [ 674.395271][ T43] usb 3-1: SerialNumber: syz [ 674.404085][T23032] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 674.482276][T23080] /dev/rnullb0: Can't open blockdev [ 674.490019][T23080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.500769][T23080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.528063][T23086] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 674.535849][T23086] /dev/rnullb0: Can't open blockdev [ 674.633506][T23032] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 674.640701][ T9] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 674.732456][T23100] sctp: [Deprecated]: syz.8.4398 (pid 23100) Use of int in max_burst socket option deprecated. [ 674.732456][T23100] Use struct sctp_assoc_value instead [ 674.782050][T23102] /dev/nullb0: Can't open blockdev [ 674.786705][ T9] usb 7-1: device descriptor read/64, error -32 [ 674.858098][T23107] trusted_key: encrypted_key: key user:syz not found [ 674.905861][ T9] usb usb7-port1: attempt power cycle [ 674.921018][T23109] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4401'. [ 674.931573][T23109] netlink: 228 bytes leftover after parsing attributes in process `syz.9.4401'. [ 675.085675][T23107] ieee802154 phy1 wpan1: encryption failed: -22 [ 675.093178][T23107] ufs: You didn't specify the type of your ufs filesystem [ 675.093178][T23107] [ 675.093178][T23107] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 675.093178][T23107] [ 675.093178][T23107] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 675.100575][T23113] /dev/rnullb0: Can't open blockdev [ 675.138039][T23107] ufs: ufstype=old is supported read-only [ 675.148794][T23107] I/O error, dev loop8, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 675.158803][T23115] /dev/rnullb0: Can't open blockdev [ 675.275887][T23119] netlink: 14556 bytes leftover after parsing attributes in process `syz.6.4403'. [ 675.285463][ T9] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 675.310371][ T9] usb 7-1: device descriptor read/8, error -32 [ 675.427713][ T9] raw-gadget.2 gadget.6: failed to queue suspend event [ 675.438806][ T9] raw-gadget.2 gadget.6: failed to queue reset event [ 675.535138][ T9] raw-gadget.2 gadget.6: failed to queue resume event [ 675.598816][ T9] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 675.631122][ C0] raw-gadget.2 gadget.6: ignoring, device is not running [ 675.638303][ T9] usb 7-1: device descriptor read/8, error -32 [ 675.761328][ T9] raw-gadget.2 gadget.6: failed to queue suspend event [ 675.770159][ T9] usb usb7-port1: unable to enumerate USB device [ 675.834703][T23125] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 675.841769][T23125] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.208479][ T5869] Bluetooth: hci1: command tx timeout [ 676.950152][T23151] /dev/rnullb0: Can't open blockdev [ 677.059624][ T43] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 677.081660][ T43] cdc_ncm 3-1:1.0: bind() failure [ 677.091976][ T43] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 677.108472][ T43] cdc_ncm 3-1:1.1: bind() failure [ 677.127137][ T43] usb 3-1: USB disconnect, device number 14 [ 677.426226][ T43] hid-generic 0008:80000001:0005.001B: unknown main item tag 0x0 [ 677.451062][ T43] hid-generic 0008:80000001:0005.001B: unknown main item tag 0x0 [ 677.471974][ T43] hid-generic 0008:80000001:0005.001B: unknown main item tag 0x0 [ 677.479797][ T43] hid-generic 0008:80000001:0005.001B: unknown main item tag 0x0 [ 677.563035][ T43] hid-generic 0008:80000001:0005.001B: unknown main item tag 0x0 [ 677.571588][ T43] hid-generic 0008:80000001:0005.001B: unknown main item tag 0x0 [ 677.581311][ T43] hid-generic 0008:80000001:0005.001B: unknown main item tag 0x0 [ 677.589209][ T43] hid-generic 0008:80000001:0005.001B: unknown main item tag 0x0 [ 677.597154][ T43] hid-generic 0008:80000001:0005.001B: unknown main item tag 0x0 [ 677.606935][ T43] hid-generic 0008:80000001:0005.001B: unknown main item tag 0x0 [ 677.628752][ T43] hid-generic 0008:80000001:0005.001B: hidraw0: HID v4.00 Device [syz1] on syz0 [ 677.684213][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 677.849018][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 677.862589][ T24] usb 3-1: can't read configurations, error -61 [ 677.945120][T23191] /dev/rnullb0: Can't open blockdev [ 678.070491][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 678.253544][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 678.261160][ T24] usb 3-1: can't read configurations, error -61 [ 678.281197][ T24] usb usb3-port1: attempt power cycle [ 678.443689][T23219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.455836][T23219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.562332][T23224] /dev/rnullb0: Can't open blockdev [ 678.597312][T23227] /dev/rnullb0: Can't open blockdev [ 678.605918][T23227] /dev/rnullb0: Can't open blockdev [ 678.669633][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 678.692972][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 678.700705][ T24] usb 3-1: can't read configurations, error -61 [ 678.849923][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 678.873645][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 678.881300][ T24] usb 3-1: can't read configurations, error -61 [ 678.887849][ T24] usb usb3-port1: unable to enumerate USB device [ 678.892643][ T9] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 678.915105][ T92] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 679.066229][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 679.073946][ T9] usb 10-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 679.085672][ T92] usb 9-1: Using ep0 maxpacket: 32 [ 679.092974][ T9] usb 10-1: config 1 interface 0 has no altsetting 0 [ 679.102006][ T92] usb 9-1: config 0 has an invalid interface number: 151 but max is 0 [ 679.110782][ T92] usb 9-1: config 0 has no interface number 0 [ 679.118514][ T9] usb 10-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.40 [ 679.128198][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.136590][ T9] usb 10-1: Product: 㜖é»ã±’곽䯽둒é¹äž¸î¨’ì™â£‚è€é›–谹顒ì•襻儗ꦵ빱댆쀛✊줲잂颪銪囩템⹞ሕáƒëªáŽï–¿ÞŸá£´æ„€àº¡ç£ºâ¤Œì°ê½Ý•嬥櫤䂭ᴓ僚븘ﳀ焟໢價喥ⵯãžé†¸áƒ»î®½è³§åŠ î§£ç­‚ì¬èœ®ï¶¼ç±§ã´‰ãŸ„럽Û㕢ã©êˆ’îŠá¯ªêœœæµãœŒï¸…çŽì·µì¥â›ì¥¨ä•“ä›·ë½æ²ƒëŸ¼ì¼å“‰ê½Ÿã½…ì„…á°Ÿé ä†“梦ゾ댡뾿ɘផÊè‹®èƒˆî¬»âž°ç“¦áª®ï´¡äŸ—æ‹ [ 679.182022][ T92] usb 9-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 679.195251][ T9] usb 10-1: Manufacturer: 哙𥳐 [ 679.200248][ T9] usb 10-1: SerialNumber: 犈龦æ¤á¬®ç­¸æ £ê‘ºà¨¥åµ…봄鸯驺ᨖ체䆬ï’錛澧塂麎ä­å—žè›‚꽚甄砤áºî¾¶è«ƒêƒ£ç•†æ¿»ãŸªäŽ·æ ·ê›¯ïŸœê‡‡â£„ï„ᩲ謁ê¤â…•嬼鶆畱ꗿ銚氿訜塸ᳰᭈ㶳ꩾ⛳濫泊凤잣뢧磎组ᡄფ೶㔚嶱魴풚▢⾴͓勽æ¹êšç®²à¤¯ìƒŽì ‡ï‚†ì›³î•¥âˆé‘†äž¿é²á¦§â½ä“ỷ枵耙ïŽà¢Œå—§ã‘¿á³¡î¥Šç½œï¬¼ï£›äŽåº¥ë…¿é›¬ç¿¢ë‰°ã­ï“šã›–玾牠 [ 679.236848][ T92] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.245417][ T92] usb 9-1: Product: syz [ 679.249606][ T92] usb 9-1: Manufacturer: syz [ 679.254204][ T92] usb 9-1: SerialNumber: syz [ 679.261032][ T92] usb 9-1: config 0 descriptor?? [ 679.490751][T23236] pim6reg1: entered promiscuous mode [ 679.497637][T23236] pim6reg1: entered allmulticast mode [ 679.513628][ T92] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 679.548253][T23275] /dev/rnullb0: Can't open blockdev [ 679.563008][ T92] usb 9-1: USB disconnect, device number 61 [ 679.607794][T11572] udevd[11572]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 679.688827][T23300] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 679.712537][T23231] UHID_CREATE from different security context by process 50 (syz.9.4429), this is not allowed. [ 679.729766][T23300] overlayfs: failed lookup in lower (/, name='cpuacct.usage_sys', err=-66): unsupported object type [ 679.745297][T23300] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 679.759796][T23300] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 679.773345][T23231] netlink: 'syz.9.4429': attribute type 1 has an invalid length. [ 679.775581][T23300] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 679.781477][T23231] netlink: 236 bytes leftover after parsing attributes in process `syz.9.4429'. [ 679.795130][T23300] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 679.814469][T23314] overlayfs: failed lookup in lower (/, name='file1', err=-66): unsupported object type [ 679.825724][T23313] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 680.091499][ T92] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 680.274713][ T92] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 680.290978][ T92] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 680.774893][ T92] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.796543][ T92] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 681.399019][T23351] /dev/rnullb0: Can't open blockdev [ 681.702182][T23357] netlink: 'syz.9.4448': attribute type 37 has an invalid length. [ 681.920005][T23359] block nbd9: Attempted send on invalid socket [ 681.926393][T23359] I/O error, dev nbd9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 681.937372][T23359] qnx4: unable to read the superblock [ 681.953076][ T92] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 681.985089][ T92] stv0680 9-1:4.0: STV(e): camera ping failed!! [ 681.997372][ T92] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 682.005702][ T92] stv0680 9-1:4.0: last error: 0, command = 0x0 [ 682.014461][ T92] usb 9-1: USB disconnect, device number 62 [ 682.043678][T23368] /dev/rnullb0: Can't open blockdev [ 682.113041][T23373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.121349][T23376] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4453'. [ 682.126342][T23373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.192484][T23391] overlay: Bad value for 'workdir' [ 682.208949][T23391] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input69 [ 682.417465][T23425] new mount options do not match the existing superblock, will be ignored [ 682.429540][T23425] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 682.545806][T23434] /dev/rnullb0: Can't open blockdev [ 682.599455][T23441] netlink: 'syz.8.4465': attribute type 1 has an invalid length. [ 682.610208][T23441] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4465'. [ 682.753536][T23445] tipc: Started in network mode [ 682.762855][T23445] tipc: Node identity 4, cluster identity 4711 [ 682.782237][T23445] tipc: Node number set to 4 [ 682.793990][T23445] /dev/rnullb0: Can't open blockdev [ 683.520650][T23459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.654921][T23467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.900295][T23482] /dev/rnullb0: Can't open blockdev [ 683.944754][ T30] audit: type=1326 audit(1756038897.099:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23477 comm="syz.9.4476" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc0458ebe9 code=0x0 [ 684.089968][T23492] ./file0: Can't lookup blockdev [ 684.159303][T23505] /dev/rnullb0: Can't open blockdev [ 684.172409][T23506] /dev/rnullb0: Can't open blockdev [ 684.224094][T23510] /dev/rnullb0: Can't open blockdev [ 684.551155][T23521] /dev/rnullb0: Can't open blockdev [ 684.745086][T23533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.758438][T23533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.068939][T23543] /dev/rnullb0: Can't open blockdev [ 685.074818][T23543] /dev/rnullb0: Can't open blockdev [ 685.080577][T23543] /dev/rnullb0: Can't open blockdev [ 685.088427][T23543] /dev/rnullb0: Can't open blockdev [ 685.094108][T23543] /dev/rnullb0: Can't open blockdev [ 685.101473][T23543] /dev/rnullb0: Can't open blockdev [ 685.108563][T23543] /dev/rnullb0: Can't open blockdev [ 685.114329][T23543] /dev/rnullb0: Can't open blockdev [ 685.120206][T23543] /dev/rnullb0: Can't open blockdev [ 685.125805][T23543] /dev/rnullb0: Can't open blockdev [ 685.131542][T23543] /dev/rnullb0: Can't open blockdev [ 685.137142][T23543] /dev/rnullb0: Can't open blockdev [ 685.142940][T23543] /dev/rnullb0: Can't open blockdev [ 685.149019][T23543] /dev/rnullb0: Can't open blockdev [ 685.154617][T23543] /dev/rnullb0: Can't open blockdev [ 685.160594][T23543] /dev/rnullb0: Can't open blockdev [ 685.166331][T23543] /dev/rnullb0: Can't open blockdev [ 685.172687][T23543] /dev/rnullb0: Can't open blockdev [ 685.178537][T23543] /dev/rnullb0: Can't open blockdev [ 685.184746][T23543] /dev/rnullb0: Can't open blockdev [ 685.190923][T23543] /dev/rnullb0: Can't open blockdev [ 685.200537][T23543] /dev/rnullb0: Can't open blockdev [ 685.207840][T23543] /dev/rnullb0: Can't open blockdev [ 685.213842][ T9] usbhid 10-1:1.0: can't add hid device: -32 [ 685.219912][ T9] usbhid 10-1:1.0: probe with driver usbhid failed with error -32 [ 685.230626][T23543] /dev/rnullb0: Can't open blockdev [ 685.237102][T23543] /dev/rnullb0: Can't open blockdev [ 685.242848][T23543] /dev/rnullb0: Can't open blockdev [ 685.248688][T23543] /dev/rnullb0: Can't open blockdev [ 685.254444][T23543] /dev/rnullb0: Can't open blockdev [ 685.260343][T23543] /dev/rnullb0: Can't open blockdev [ 685.266089][T23543] /dev/rnullb0: Can't open blockdev [ 685.271870][T23543] /dev/rnullb0: Can't open blockdev [ 685.278135][T23543] /dev/rnullb0: Can't open blockdev [ 685.283774][T23543] /dev/rnullb0: Can't open blockdev [ 686.136660][T23586] /dev/rnullb0: Can't open blockdev [ 686.937236][T22837] raw-gadget.2 gadget.6: failed to queue disconnect event [ 687.276810][T23610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 687.286503][T13818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 687.295913][T13818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 687.304519][T13818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 687.312280][T13818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 687.447615][ T5986] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 687.487491][T23721] /dev/rnullb0: Can't open blockdev [ 687.496490][T23607] chnl_net:caif_netlink_parms(): no params data found [ 687.589737][T23607] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.594230][T23751] /dev/rnullb0: Can't open blockdev [ 687.597011][T23607] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.611901][T23607] bridge_slave_0: entered allmulticast mode [ 687.620904][T23607] bridge_slave_0: entered promiscuous mode [ 687.628676][T23607] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.639633][T23607] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.655207][T23607] bridge_slave_1: entered allmulticast mode [ 687.660600][ T5986] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 687.662399][T23607] bridge_slave_1: entered promiscuous mode [ 687.671948][T23780] /dev/rnullb0: Can't open blockdev [ 687.681727][ T43] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 687.695991][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.706536][ T5986] usb 3-1: Product: syz [ 687.714037][ T5986] usb 3-1: Manufacturer: syz [ 687.719755][T23607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.720288][ T5986] usb 3-1: SerialNumber: syz [ 687.739186][ T5986] usb 3-1: config 0 descriptor?? [ 687.746570][T23607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.792600][T23607] team0: Port device team_slave_0 added [ 687.795793][T23607] team0: Port device team_slave_1 added [ 687.819277][T23808] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 687.819345][T23808] FAT-fs (loop9): unable to read boot sector [ 687.820066][T23846] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 687.820123][T23846] FAT-fs (loop9): unable to read boot sector [ 687.832363][T23607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.832383][T23607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.832408][T23607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.833824][T23607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.833840][T23607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.833862][T23607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.844255][ T43] usb 9-1: device descriptor read/64, error -71 [ 687.871401][T23607] hsr_slave_0: entered promiscuous mode [ 687.872073][T23607] hsr_slave_1: entered promiscuous mode [ 687.872550][T23607] debugfs: 'hsr0' already exists in 'hsr' [ 687.872566][T23607] Cannot create hsr debugfs directory [ 688.004632][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.019937][T23607] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.100242][ T43] usb 9-1: new full-speed USB device number 64 using dummy_hcd [ 688.122680][T23607] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.181531][T23607] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.239309][ T43] usb 9-1: device descriptor read/64, error -71 [ 688.240356][T23607] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.333376][T23607] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 688.337528][T23607] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 688.342619][T23607] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 688.346525][T23607] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 688.362306][ T43] usb usb9-port1: attempt power cycle [ 688.365360][T23607] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.365437][T23607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.365593][T23607] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.365665][T23607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.419511][T23607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.434032][T23568] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.441864][T23568] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.456275][T23607] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.460993][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.461062][ T6511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.468813][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.468882][ T6526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.665298][T23607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.720259][ T43] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 688.742150][ T43] usb 9-1: device descriptor read/8, error -71 [ 688.870258][T13818] Bluetooth: hci1: command 0x0406 tx timeout [ 688.900829][T23607] veth0_vlan: entered promiscuous mode [ 688.908735][T23607] veth1_vlan: entered promiscuous mode [ 688.940772][T23607] veth0_macvtap: entered promiscuous mode [ 688.965326][T23607] veth1_macvtap: entered promiscuous mode [ 689.008530][ T5986] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 689.010381][ T5986] asix 3-1:0.0: probe with driver asix failed with error -71 [ 689.016720][T23607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.019999][ T43] usb 9-1: new full-speed USB device number 66 using dummy_hcd [ 689.023893][ T5986] usb 3-1: USB disconnect, device number 19 [ 689.028810][T23607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.043178][ T43] usb 9-1: device descriptor read/8, error -71 [ 689.045746][ T6511] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.045784][ T6511] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.045812][ T6511] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.045849][ T6511] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.102153][T23573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.102174][T23573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.139030][T23575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.139050][T23575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.158884][ T43] usb usb9-port1: unable to enumerate USB device [ 689.467878][T24020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.475929][T24020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.476821][T24020] ./file0: Can't lookup blockdev [ 689.554584][ T5869] Bluetooth: hci4: command tx timeout [ 689.700108][T24033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.708731][ T5867] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 689.713643][T24033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.864469][ T5867] usb 3-1: device descriptor read/64, error -71 [ 689.941937][T24033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.952993][T24033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.121114][ T5867] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 690.220706][T24047] /dev/rnullb0: Can't open blockdev [ 690.271090][ T5867] usb 3-1: device descriptor read/64, error -71 [ 690.301678][T24055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.311042][T24055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.386437][T24060] /dev/rnullb0: Can't open blockdev [ 690.392338][ T5867] usb usb3-port1: attempt power cycle [ 690.550078][T24072] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 690.560006][T24072] hpfs: hpfs_map_sector(): read error [ 690.598949][T24075] /dev/rnullb0: Can't open blockdev [ 690.630468][T24077] /dev/rnullb0: Can't open blockdev [ 690.752243][ T5867] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 690.777702][ T5867] usb 3-1: device descriptor read/8, error -71 [ 690.808195][T24084] /dev/rnullb0: Can't open blockdev [ 690.957425][T24095] /dev/rnullb0: Can't open blockdev [ 691.044100][ T5867] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 691.073060][T24101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.090167][T24101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.104037][T24101] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4531'. [ 691.212433][ T5867] usb 3-1: device descriptor read/8, error -71 [ 691.222891][T13280] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 691.331569][ T5867] usb usb3-port1: unable to enumerate USB device [ 691.404925][T13280] usb 9-1: Using ep0 maxpacket: 8 [ 691.412124][T13280] usb 9-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 177, changing to 11 [ 691.423692][T13280] usb 9-1: config 1 interface 0 has no altsetting 0 [ 691.432659][T13280] usb 9-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.40 [ 691.442007][T13280] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.450241][T13280] usb 9-1: Product: 祵渇꩛ê…꓿⛩컱鲹â›é¹´í­â¸¤é­ªê¥å·—훇넼庱ã¯ê¢¯ìˆìŸŽä¿—煪䔕퀒䕻胙笾ê€çµÑ–ê¤î¨ïœ¿è¡•á…‰çƒá²©â›£ã¥¾ì”⇭⋤ᅼ碸㞞í˜ÜŠãŽ¯â¡»ä€“ã¦±è³£ëœ¿ [ 691.469627][T13280] usb 9-1: Manufacturer: Ъ [ 691.474265][T13280] usb 9-1: SerialNumber: syz [ 691.716651][T13280] usbhid 9-1:1.0: can't add hid device: -71 [ 691.731395][T13280] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 691.758496][T13280] usb 9-1: USB disconnect, device number 67 [ 691.778774][ T5869] Bluetooth: hci4: command tx timeout [ 691.818389][T24115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.836431][T24115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.937879][T24125] binder: 24122:24125 unknown command 0 [ 691.944018][T24125] binder: 24122:24125 ioctl c0306201 200000000480 returned -22 [ 692.064983][T24139] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 692.073217][T24139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.610571][T24147] /dev/rnullb0: Can't open blockdev [ 692.721002][T24159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4540'. [ 692.727202][T24161] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 692.763609][T24161] mkiss: ax0: crc mode is auto. [ 692.769394][T24163] /dev/rnullb0: Can't open blockdev [ 692.814053][T24169] /dev/rnullb0: Can't open blockdev [ 692.968108][T24177] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 693.099045][T24181] /dev/rnullb0: Can't open blockdev [ 693.262770][T24202] befs: (nbd8): No write support. Marking filesystem read-only [ 693.292009][T24202] block nbd8: Attempted send on invalid socket [ 693.312972][T24202] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 693.341288][T24209] /dev/rnullb0: Can't open blockdev [ 693.366783][T24202] befs: (nbd8): unable to read superblock [ 693.550771][T24212] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 693.722170][T24222] /dev/rnullb0: Can't open blockdev [ 693.732427][T24222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4554'. [ 694.024726][ T5869] Bluetooth: hci4: command tx timeout [ 694.088872][ T5986] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 694.262595][ T5986] usb 3-1: Using ep0 maxpacket: 8 [ 694.269257][ T5986] usb 3-1: config 0 has no interfaces? [ 694.280420][ T5986] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 694.304244][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.326905][ T5986] usb 3-1: Product: syz [ 694.339373][ T5986] usb 3-1: Manufacturer: syz [ 694.351134][ T5986] usb 3-1: SerialNumber: syz [ 694.374607][ T5986] usb 3-1: config 0 descriptor?? [ 694.609498][ T5986] usb 3-1: USB disconnect, device number 24 [ 694.828736][T24246] /dev/rnullb0: Can't open blockdev [ 695.201764][ T5867] usb 9-1: new full-speed USB device number 68 using dummy_hcd [ 695.226140][T24260] /dev/rnullb0: Can't open blockdev [ 695.375762][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 695.375795][ T5867] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 695.375819][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 695.377771][ T5867] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 695.377797][ T5867] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.377816][ T5867] usb 9-1: Product: syz [ 695.377830][ T5867] usb 9-1: Manufacturer: syz [ 695.377841][ T5867] usb 9-1: SerialNumber: syz [ 695.379113][ T5867] usb 9-1: config 0 descriptor?? [ 695.382760][T24249] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 695.382845][T24249] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 695.383748][ T5867] usb 9-1: ucan: probing device on interface #0 [ 695.593584][T24280] /dev/rnullb0: Can't open blockdev [ 696.035655][ T5867] ucan 9-1:0.0: probe with driver ucan failed with error -22 [ 696.227276][ T5869] Bluetooth: hci4: command tx timeout [ 696.837099][T13280] usb 7-1: new full-speed USB device number 105 using dummy_hcd [ 696.975964][T13280] usb 7-1: device descriptor read/64, error -71 [ 696.992680][ T5867] usb 9-1: USB disconnect, device number 68 [ 697.019595][T24302] /dev/rnullb0: Can't open blockdev [ 697.054006][T24309] /dev/rnullb0: Can't open blockdev [ 697.232487][T13280] usb 7-1: new full-speed USB device number 106 using dummy_hcd [ 697.374439][T13280] usb 7-1: device descriptor read/64, error -71 [ 697.489582][T13280] usb usb7-port1: attempt power cycle [ 697.852985][T13280] usb 7-1: new full-speed USB device number 107 using dummy_hcd [ 697.874201][ T43] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 697.884917][ T5867] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 697.887650][T13280] usb 7-1: device descriptor read/8, error -71 [ 698.037026][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 698.045276][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 698.050492][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 698.062820][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17446, setting to 1024 [ 698.074939][ T43] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 698.085442][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.094375][ T5867] usb 3-1: unable to get BOS descriptor or descriptor too short [ 698.102866][T24337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.112353][T24337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.112979][ T43] usb 9-1: config 0 descriptor?? [ 698.125672][ T5867] usb 3-1: config 10 has an invalid interface number: 81 but max is 0 [ 698.139535][ T5867] usb 3-1: config 10 has no interface number 0 [ 698.146044][ T5867] usb 3-1: config 10 interface 81 has no altsetting 0 [ 698.153144][T24319] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 698.161649][ T5867] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 698.172713][ T43] hub 9-1:0.0: USB hub found [ 698.173677][T13280] usb 7-1: new full-speed USB device number 108 using dummy_hcd [ 698.184269][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.197104][ T5867] usb 3-1: Product: syz [ 698.201433][ T5867] usb 3-1: Manufacturer: syz [ 698.206201][ T5867] usb 3-1: SerialNumber: syz [ 698.217876][T13280] usb 7-1: device descriptor read/8, error -71 [ 698.355466][T13280] usb usb7-port1: unable to enumerate USB device [ 698.386309][ T43] hub 9-1:0.0: 1 port detected [ 698.450239][ T5867] ums-jumpshot 3-1:10.81: USB Mass Storage device detected [ 698.461489][ T5869] Bluetooth: hci4: command tx timeout [ 698.491553][ T5867] ums-jumpshot 3-1:10.81: Quirks match for vid 05dc pid 0001: 2 [ 698.540508][ T5867] usb 3-1: USB disconnect, device number 25 [ 699.055083][T24319] netlink: 'syz.8.4574': attribute type 10 has an invalid length. [ 699.065968][T24319] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.073499][T24319] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.075195][T24371] /dev/rnullb0: Can't open blockdev [ 699.108756][T24319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.120298][T24319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.151629][ T5867] usb 9-1: USB disconnect, device number 69 [ 699.161564][ T43] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 700.257638][T22464] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 700.311785][T22464] CPU: 1 UID: 0 PID: 22464 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 700.311811][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 700.311822][T22464] Call Trace: [ 700.311830][T22464] [ 700.311837][T22464] dump_stack_lvl+0x189/0x250 [ 700.311865][T22464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.311886][T22464] ? __pfx__printk+0x10/0x10 [ 700.311910][T22464] ? rcu_is_watching+0x15/0xb0 [ 700.311930][T22464] dump_header+0xd3/0x480 [ 700.311946][T22464] oom_kill_process+0x387/0x920 [ 700.311972][T22464] out_of_memory+0xf09/0x12a0 [ 700.311992][T22464] ? rcu_is_watching+0x15/0xb0 [ 700.312010][T22464] ? __pfx_out_of_memory+0x10/0x10 [ 700.312026][T22464] ? percpu_ref_put+0x19/0x180 [ 700.312042][T22464] ? lock_release+0x4b/0x3e0 [ 700.312073][T22464] mem_cgroup_out_of_memory+0x145/0x240 [ 700.312091][T22464] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 700.312112][T22464] ? _raw_spin_unlock+0x28/0x50 [ 700.312132][T22464] ? memcg1_oom_prepare+0x37f/0x450 [ 700.312154][T22464] try_charge_memcg+0xdff/0x1290 [ 700.312175][T22464] ? rcu_is_watching+0x15/0xb0 [ 700.312197][T22464] ? __pfx_try_charge_memcg+0x10/0x10 [ 700.312218][T22464] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 700.312234][T22464] ? xa_load+0x60/0x210 [ 700.312252][T22464] ? rcu_is_watching+0x15/0xb0 [ 700.312267][T22464] ? rcu_is_watching+0x15/0xb0 [ 700.312281][T22464] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 700.312302][T22464] charge_memcg+0x9f/0x180 [ 700.312321][T22464] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 700.312340][T22464] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 700.312363][T22464] __read_swap_cache_async+0x28c/0x510 [ 700.312387][T22464] swap_cluster_readahead+0x305/0x5f0 [ 700.312409][T22464] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 700.312430][T22464] ? rcu_is_watching+0x15/0xb0 [ 700.312446][T22464] ? filemap_get_entry+0xad/0x2f0 [ 700.312465][T22464] ? get_vma_policy+0x27c/0x3c0 [ 700.312487][T22464] swapin_readahead+0x17d/0xb50 [ 700.312506][T22464] ? __pfx_filemap_get_entry+0x10/0x10 [ 700.312525][T22464] ? get_swap_device_info+0x1c/0x2b0 [ 700.312544][T22464] ? rcu_is_watching+0x15/0xb0 [ 700.312561][T22464] ? __pfx_swapin_readahead+0x10/0x10 [ 700.312582][T22464] ? __filemap_get_folio+0x9a6/0xaf0 [ 700.312602][T22464] ? swap_cache_get_folio+0xae/0x3b0 [ 700.312631][T22464] do_swap_page+0x525/0x5ac0 [ 700.312655][T22464] ? ___pte_offset_map+0x29/0x250 [ 700.312677][T22464] ? lock_acquire+0x5f/0x360 [ 700.312691][T22464] ? do_swap_page+0x184/0x5ac0 [ 700.312711][T22464] ? __pfx_do_swap_page+0x10/0x10 [ 700.312730][T22464] ? __pfx_default_wake_function+0x10/0x10 [ 700.312746][T22464] ? ___pte_offset_map+0x45/0x250 [ 700.312766][T22464] ? ___pte_offset_map+0x1cf/0x250 [ 700.312787][T22464] ? pte_offset_map_rw_nolock+0xea/0x160 [ 700.312809][T22464] __handle_mm_fault+0xe55/0x5400 [ 700.312837][T22464] ? __pfx___handle_mm_fault+0x10/0x10 [ 700.312858][T22464] ? rcu_is_watching+0x15/0xb0 [ 700.312879][T22464] ? lock_vma_under_rcu+0x3cb/0x450 [ 700.312894][T22464] ? rcu_is_watching+0x15/0xb0 [ 700.312912][T22464] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 700.312931][T22464] handle_mm_fault+0x40a/0x8e0 [ 700.312955][T22464] do_user_addr_fault+0xa81/0x1390 [ 700.312975][T22464] ? rcu_is_watching+0x15/0xb0 [ 700.312992][T22464] ? trace_page_fault_user+0x84/0x1e0 [ 700.313010][T22464] exc_page_fault+0x82/0x100 [ 700.313031][T22464] asm_exc_page_fault+0x26/0x30 [ 700.313048][T22464] RIP: 0033:0x7fdc045b6a10 [ 700.313065][T22464] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 700.313086][T22464] RSP: 002b:00007fffb9360f18 EFLAGS: 00010246 [ 700.313103][T22464] RAX: 0000000000000000 RBX: 00000000000000b5 RCX: 00007fdc045c14a5 [ 700.313115][T22464] RDX: 00007fffb9360f60 RSI: 0000000000000000 RDI: 0000000000000000 [ 700.313127][T22464] RBP: 00007fffb9360fcc R08: 0000000000000000 R09: 0000000000000000 [ 700.313138][T22464] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 700.313149][T22464] R13: 00000000000927c0 R14: 00000000000a61a2 R15: 00007fffb9361020 [ 700.313175][T22464] [ 700.836495][T22464] memory: usage 307200kB, limit 307200kB, failcnt 3378 [ 700.843408][T22464] memory+swap: usage 307572kB, limit 9007199254740988kB, failcnt 0 [ 700.944984][T22464] kmem: usage 1436kB, limit 9007199254740988kB, failcnt 0 [ 700.953148][T22464] Memory cgroup stats for /syz9: [ 700.953283][T22464] cache 313102336 [ 700.991068][T22464] rss 0 [ 701.004962][T22464] rss_huge 0 [ 701.017438][T22464] shmem 313102336 [ 701.041804][T22464] mapped_file 0 [ 701.047039][T24428] /dev/rnullb0: Can't open blockdev [ 701.092823][T22464] dirty 0 [ 701.132110][T22464] writeback 0 [ 701.158701][T22464] workingset_refault_anon 2897 [ 701.163505][T22464] workingset_refault_file 32 [ 701.199993][T22464] swap 380928 [ 701.210758][T22464] swapcached 0 [ 701.214209][T22464] pgpgin 643133 [ 701.217739][T22464] pgpgout 567714 [ 701.225067][T22464] pgfault 376468 [ 701.228638][T22464] pgmajfault 96248 [ 701.246151][T22464] inactive_anon 156553216 [ 701.261912][T22464] active_anon 156549120 [ 701.283904][T22464] inactive_file 0 [ 701.287794][T13280] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 701.322164][T22464] active_file 0 [ 701.338682][T22464] unevictable 0 [ 701.386976][T22464] hierarchical_memory_limit 314572800 [ 701.392651][T22464] hierarchical_memsw_limit 9223372036854771712 [ 701.398908][T22464] total_cache 313102336 [ 701.406628][T22464] total_rss 0 [ 701.410011][T22464] total_rss_huge 0 [ 701.414761][T22464] total_shmem 313102336 [ 701.419010][T22464] total_mapped_file 0 [ 701.423146][T22464] total_dirty 0 [ 701.428687][T22464] total_writeback 0 [ 701.432585][T22464] total_workingset_refault_anon 2897 [ 701.439656][T22464] total_workingset_refault_file 32 [ 701.444868][T22464] total_swap 380928 [ 701.450752][T22464] total_swapcached 0 [ 701.454682][T22464] total_pgpgin 643137 [ 701.459084][T22464] total_pgpgout 567718 [ 701.463226][T22464] total_pgfault 376493 [ 701.469616][T22464] total_pgmajfault 96248 [ 701.473942][T22464] total_inactive_anon 156553216 [ 701.479239][T22464] total_active_anon 156549120 [ 701.484490][T22464] total_inactive_file 0 [ 701.489082][T22464] total_active_file 0 [ 701.493153][T22464] total_unevictable 0 [ 701.497256][T22464] anon_cost 0 [ 701.501073][T22464] file_cost 0 [ 701.504446][T22464] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.4581,pid=24352,uid=0 [ 701.510050][T13280] usb 9-1: Using ep0 maxpacket: 32 [ 701.519903][T22464] Memory cgroup out of memory: Killed process 24352 (syz.9.4581) total-vm:101944kB, anon-rss:952kB, file-rss:23080kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 701.546866][T13280] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 701.568928][T13280] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.583740][T13280] usb 9-1: config 0 descriptor?? [ 701.594232][T13280] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 702.096554][T24448] /dev/rnullb0: Can't open blockdev [ 702.444557][ T30] audit: type=1326 audit(1756038914.427:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24467 comm="syz.6.4602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f510958ebe9 code=0x0 [ 702.466551][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.473564][ T5867] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 702.647743][ T5867] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 702.665006][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.673321][ T5867] usb 3-1: Product: syz [ 702.678993][ T5867] usb 3-1: Manufacturer: syz [ 702.683645][ T5867] usb 3-1: SerialNumber: syz [ 702.704838][ T5867] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 702.724303][ T43] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 702.942633][T24455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.952843][T24455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.352352][ T5986] usb 3-1: USB disconnect, device number 26 [ 703.452362][T24497] infiniband syz2: set active [ 703.457674][T24497] infiniband syz2: added veth1_vlan [ 703.489678][T24497] RDS/IB: syz2: added [ 703.496913][T24497] smc: adding ib device syz2 with port count 1 [ 703.507519][T24497] smc: ib device syz2 port 1 has pnetid [ 703.563524][T13280] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 703.705123][T24513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.720874][T24513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.747192][T13280] usb 7-1: Using ep0 maxpacket: 16 [ 703.754794][T13280] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 703.769211][T13280] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.784454][T13280] usb 7-1: config 0 has no interface number 0 [ 703.796388][T13280] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 703.806930][T13280] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.817801][T13280] usb 7-1: Product: syz [ 703.828431][T13280] usb 7-1: Manufacturer: syz [ 703.839445][T13280] usb 7-1: SerialNumber: syz [ 703.852728][T13280] usb 7-1: config 0 descriptor?? [ 704.004746][T24529] /dev/rnullb0: Can't open blockdev [ 704.015429][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 704.070124][T24532] /dev/rnullb0: Can't open blockdev [ 704.077435][T13280] usb 7-1: Found UVC 0.00 device syz (046d:08d3) [ 704.086170][T13280] usb 7-1: No valid video chain found. [ 704.102189][ T43] usb 3-1: Service connection timeout for: 256 [ 704.109134][ T43] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 704.118985][ T43] ath9k_htc: Failed to initialize the device [ 704.128050][ T5986] usb 3-1: ath9k_htc: USB layer deinitialized [ 704.149233][T24538] overlayfs: missing 'lowerdir' [ 704.172154][ T5922] usb 9-1: USB disconnect, device number 70 [ 704.247313][T24553] /dev/rnullb0: Can't open blockdev [ 704.362336][T24498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4605'. [ 704.582210][ T43] usb 7-1: USB disconnect, device number 109 [ 704.622038][ T5922] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 704.793113][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 704.800059][ T5922] usb 3-1: unable to get BOS descriptor or descriptor too short [ 704.810712][ T5922] usb 3-1: config 119 has an invalid descriptor of length 1, skipping remainder of the config [ 704.830961][ T5922] usb 3-1: config 119 has 0 interfaces, different from the descriptor's value: 1 [ 704.841893][T24587] /dev/rnullb0: Can't open blockdev [ 704.844569][ T5922] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=ed.67 [ 704.856589][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.866121][ T5922] usb 3-1: Product: syz [ 704.872952][ T5922] usb 3-1: Manufacturer: syz [ 704.878046][ T5922] usb 3-1: SerialNumber: syz [ 705.193699][T24596] /dev/rnullb0: Can't open blockdev [ 705.582809][T24620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.613495][T24620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.860549][T24632] syzkaller1: entered promiscuous mode [ 705.877491][T24632] syzkaller1: entered allmulticast mode [ 705.949612][ T5986] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 706.097736][ T5986] usb 9-1: device descriptor read/64, error -71 [ 706.129772][T13280] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 706.304514][T13280] usb 7-1: config 7 descriptor has 1 excess byte, ignoring [ 706.322017][T13280] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 706.346093][T13280] usb 7-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 706.354834][ T5986] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 706.384334][T13280] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.410712][T13280] usb 7-1: Product: syz [ 706.414970][T13280] usb 7-1: Manufacturer: syz [ 706.431411][T13280] usb 7-1: SerialNumber: syz [ 706.443693][T13280] rndis_host 7-1:7.0: skipping garbage [ 706.450317][T13280] usb 7-1: bad CDC descriptors [ 706.462820][T13280] option 7-1:7.0: GSM modem (1-port) converter detected [ 706.504092][ T5986] usb 9-1: device descriptor read/64, error -71 [ 706.529024][T24648] /dev/sg0: Can't lookup blockdev [ 706.621939][ T5986] usb usb9-port1: attempt power cycle [ 706.660679][T24630] netlink: 'syz.6.4624': attribute type 21 has an invalid length. [ 706.674461][T24630] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4624'. [ 706.701376][T24630] /dev/rnullb0: Can't open blockdev [ 706.710627][ T92] usb 7-1: USB disconnect, device number 110 [ 706.720033][ T92] option 7-1:7.0: device disconnected [ 706.997948][ T5986] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 707.031939][ T5986] usb 9-1: device descriptor read/8, error -71 [ 707.295480][ T5986] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 707.322546][ T5986] usb 9-1: device descriptor read/8, error -71 [ 707.446540][ T5986] usb usb9-port1: unable to enumerate USB device [ 707.545590][ T5922] usb 3-1: USB disconnect, device number 27 [ 707.940241][T24695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.956579][T24695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.375640][ T5922] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 708.557663][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 708.569316][ T5922] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 708.577522][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.607423][ T5922] usb 3-1: config 0 has no interface number 0 [ 709.124096][ T5922] usb 3-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 709.147879][ T5922] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 709.157103][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.165203][ T5922] usb 3-1: Product: syz [ 709.188244][ T5922] usb 3-1: Manufacturer: syz [ 709.192891][ T5922] usb 3-1: SerialNumber: syz [ 709.199600][ T5922] usb 3-1: config 0 descriptor?? [ 709.210835][ T5922] asix 3-1:0.251: probe with driver asix failed with error -22 [ 709.384408][T24746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.393681][T24746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.432414][T24751] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4642'. [ 709.791083][T24758] binder: BINDER_SET_CONTEXT_MGR already set [ 709.798653][T24758] binder: 24757:24758 ioctl 4018620d 2000000000c0 returned -16 [ 709.800963][T24760] binder: 24757:24760 ioctl 89e0 200000000240 returned -22 [ 710.047036][T24771] /dev/rnullb0: Can't open blockdev [ 710.076043][ T5922] usb 9-1: new low-speed USB device number 75 using dummy_hcd [ 710.136083][T24774] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4647'. [ 710.145565][T24773] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4647'. [ 710.155451][T24774] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4647'. [ 710.166394][T24773] /dev/sg0: Can't lookup blockdev [ 710.201632][T24776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.210553][T24776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.214888][ T5922] usb 9-1: device descriptor read/64, error -71 [ 710.222775][T24776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.234014][T24776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.244661][T24776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.255488][T24776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.264309][T24776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.273592][T24776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.282824][T24776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.293362][T24776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.302506][T24776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.311428][T24776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.471992][ T5922] usb 9-1: new low-speed USB device number 76 using dummy_hcd [ 710.633886][ T5922] usb 9-1: device descriptor read/64, error -71 [ 710.696195][T13280] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 710.749929][ T5922] usb usb9-port1: attempt power cycle [ 710.858352][T13280] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 710.866460][T13280] usb 7-1: config 0 has no interface number 0 [ 710.872789][T13280] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.883794][T13280] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.893876][T13280] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 710.907429][T13280] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 710.916718][T13280] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.926788][T13280] usb 7-1: config 0 descriptor?? [ 711.114365][ T5922] usb 9-1: new low-speed USB device number 77 using dummy_hcd [ 711.135884][ T5922] usb 9-1: device descriptor read/8, error -71 [ 711.216946][ T92] usb 3-1: USB disconnect, device number 28 [ 711.402071][ T5922] usb 9-1: new low-speed USB device number 78 using dummy_hcd [ 711.436394][ T5922] usb 9-1: device descriptor read/8, error -71 [ 711.551979][ T5922] usb usb9-port1: unable to enumerate USB device [ 711.685821][T13280] usbhid 7-1:0.1: can't add hid device: -71 [ 711.700971][T13280] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 711.725503][T13280] usb 7-1: USB disconnect, device number 111 [ 711.794914][T24825] /dev/rnullb0: Can't open blockdev [ 712.931426][ T43] usb 7-1: new full-speed USB device number 112 using dummy_hcd [ 713.081125][ T43] usb 7-1: device descriptor read/64, error -71 [ 713.096571][T24843] /dev/rnullb0: Can't open blockdev [ 713.349509][ T43] usb 7-1: new full-speed USB device number 113 using dummy_hcd [ 713.487821][ T43] usb 7-1: device descriptor read/64, error -71 [ 713.605175][ T43] usb usb7-port1: attempt power cycle [ 713.928963][T24842] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 713.935397][T24842] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 713.946178][T24842] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 713.952794][T24842] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 713.965046][T24842] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 713.968567][ T43] usb 7-1: new full-speed USB device number 114 using dummy_hcd [ 713.990390][ T43] usb 7-1: device descriptor read/8, error -71 [ 714.096979][ T5986] IPVS: starting estimator thread 0... [ 714.194631][T24860] IPVS: using max 55 ests per chain, 132000 per kthread [ 714.255857][ T5986] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 714.275227][ T43] usb 7-1: new full-speed USB device number 115 using dummy_hcd [ 714.311704][ T43] usb 7-1: device descriptor read/8, error -71 [ 714.428524][ T43] usb usb7-port1: unable to enumerate USB device [ 714.463604][ T5986] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.477524][ T5986] usb 3-1: config 0 has no interfaces? [ 714.490399][ T5986] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 714.507631][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.525235][ T5986] usb 3-1: config 0 descriptor?? [ 714.542876][T24874] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4664'. [ 714.572593][T24879] /dev/rnullb0: Can't open blockdev [ 714.813468][ T5986] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 714.986800][ T5986] usb 9-1: config 0 has an invalid interface number: 106 but max is 0 [ 714.997811][ T5986] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.009018][ T5986] usb 9-1: config 0 has no interface number 0 [ 715.015255][ T5986] usb 9-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 43 [ 715.028180][ T5986] usb 9-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 715.042943][ T5986] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 715.052791][ T5986] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.064981][ T5986] usb 9-1: config 0 descriptor?? [ 715.076722][T24874] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 715.097113][ T5986] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 715.180623][ T92] usb 3-1: USB disconnect, device number 29 [ 715.305427][ T5869] Bluetooth: hci5: command 0x0c1a tx timeout [ 715.319886][T24874] netlink: 'syz.8.4664': attribute type 142 has an invalid length. [ 715.639570][T23573] usb 9-1: Failed to submit usb control message: -71 [ 715.640956][ T92] usb 9-1: USB disconnect, device number 79 [ 715.649547][T23573] usb 9-1: unable to send the bmi data to the device: -71 [ 715.665461][T23573] usb 9-1: unable to get target info from device [ 715.674154][T23573] usb 9-1: could not get target info (-71) [ 715.680961][T23573] usb 9-1: could not probe fw (-71) [ 715.688634][T24949] sg_write: data in/out 2907/14 bytes for SCSI command 0x0-- guessing data in; [ 715.688634][T24949] program syz.2.4670 not setting count and/or reply_len properly [ 715.718762][T24949] /dev/rnullb0: Can't open blockdev [ 715.761544][T24956] /dev/rnullb0: Can't open blockdev [ 716.075519][ T5869] Bluetooth: hci1: command 0x0c1a tx timeout [ 716.160655][ T5869] Bluetooth: hci4: command 0x0c1a tx timeout [ 716.220080][T24993] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 716.244239][T24992] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 716.251905][T24992] /dev/rnullb0: Can't open blockdev [ 716.309653][T25005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.326631][T25005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.341448][T25013] /dev/rnullb0: Can't open blockdev [ 716.349989][T25013] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 716.353138][ T5986] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 716.390437][T25015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4683'. [ 716.536678][ T5986] usb 7-1: Using ep0 maxpacket: 16 [ 716.542950][ T5986] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 716.550556][ T5986] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 716.561885][ T43] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 716.569614][ T5986] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 716.579785][ T5986] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.589918][ T5986] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 716.602731][ T5986] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 716.614706][ T5986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.619910][T25022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.623730][ T5986] usb 7-1: Product: syz [ 716.638845][ T5986] usb 7-1: Manufacturer: syz [ 716.640257][T25022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.645721][ T5986] usb 7-1: SerialNumber: syz [ 716.664537][ T92] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 716.665330][ T5986] usb 7-1: config 0 descriptor?? [ 716.678524][T24980] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 716.696057][T25022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.701436][ T5986] mcba_usb 7-1:0.0 can0: couldn't setup read URBs [ 716.708903][T25022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.719848][ T5986] mcba_usb 7-1:0.0 can0: couldn't start device: -90 [ 716.729589][T25022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.738753][T25022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.759548][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 716.766146][ T43] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 716.775197][ T43] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 716.786936][ T43] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 716.798713][ T5986] mcba_usb 7-1:0.0: probe with driver mcba_usb failed with error -90 [ 716.811459][ T43] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 716.827658][ T43] usb 9-1: config 0 interface 0 has no altsetting 0 [ 716.837742][ T43] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 716.847261][ T43] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 716.855896][ T43] usb 9-1: Product: syz [ 716.858863][ T92] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 716.860057][ T43] usb 9-1: Manufacturer: syz [ 716.877753][ T43] usb 9-1: SerialNumber: syz [ 716.877794][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 716.885271][ T43] usb 9-1: config 0 descriptor?? [ 716.900378][ T92] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 716.902423][ T43] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 716.910335][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.927964][ T43] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 716.928348][ T92] usb 3-1: Product: syz [ 716.945445][ T92] usb 3-1: Manufacturer: syz [ 716.950194][ T92] usb 3-1: SerialNumber: syz [ 716.956734][T24980] /dev/rnullb0: Can't open blockdev [ 716.963333][ T92] usb 3-1: config 0 descriptor?? [ 716.972508][ T92] em28xx 3-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 716.982278][ T5922] usb 7-1: USB disconnect, device number 116 [ 716.989174][ T92] em28xx 3-1:0.0: Device initialization failed. [ 716.996025][ T92] em28xx 3-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 717.126470][ T92] usb 9-1: USB disconnect, device number 80 [ 717.136502][ T92] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 717.193059][T25015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.201719][T25015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.211811][T25015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.220610][T25015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.229467][ T43] usb 3-1: USB disconnect, device number 30 [ 717.386022][T25076] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 717.396651][T25076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.407468][T25076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.568206][T25081] ./cgroup: Can't lookup blockdev [ 717.630181][T25076] /dev/rnullb0: Can't open blockdev [ 717.638367][T25076] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 717.665743][T25090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.674956][T25090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.698897][T25090] /dev/rnullb0: Can't open blockdev [ 718.088880][T25109] /dev/rnullb0: Can't open blockdev [ 718.385524][ T5869] Bluetooth: hci4: command 0x0c1a tx timeout [ 718.431019][T25129] syzkaller1: entered promiscuous mode [ 718.436626][T25129] syzkaller1: entered allmulticast mode [ 718.456358][T25133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4698'. [ 718.467226][T25133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4698'. [ 718.478738][T25133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4698'. [ 718.489103][T25133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4698'. [ 718.567906][T25150] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4702'. [ 718.622883][ T5869] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 718.637204][T25154] /dev/rnullb0: Can't open blockdev [ 718.704328][T25163] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 718.712914][ T24] usb 9-1: new low-speed USB device number 81 using dummy_hcd [ 718.882981][ T24] usb 9-1: config 7 interface 0 has no altsetting 0 [ 718.891543][T25173] netlink: 'syz.2.4704': attribute type 21 has an invalid length. [ 718.895775][T25175] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4709'. [ 718.900287][T25173] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4704'. [ 718.912828][T25175] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4709'. [ 718.921050][ T24] usb 9-1: string descriptor 0 read error: -22 [ 718.926848][T25175] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4709'. [ 718.935984][ T24] usb 9-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 718.973699][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.991665][T25177] /dev/rnullb0: Can't open blockdev [ 718.997857][ T24] usb 9-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 719.007712][ T24] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 719.019885][ T24] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 719.030314][ T24] usb 9-1: media controller created [ 719.059212][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 719.083033][T25181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.106844][T25181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.171065][T25181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.181443][T25181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.404518][T25196] /dev/rnullb0: Can't open blockdev [ 719.410328][T25196] /dev/rnullb0: Can't open blockdev [ 719.416465][T25196] /dev/rnullb0: Can't open blockdev [ 719.422085][T25196] /dev/rnullb0: Can't open blockdev [ 719.428421][T25196] /dev/rnullb0: Can't open blockdev [ 719.434356][T25196] /dev/rnullb0: Can't open blockdev [ 719.440089][T25196] /dev/rnullb0: Can't open blockdev [ 719.447460][T25196] /dev/rnullb0: Can't open blockdev [ 719.449196][T25129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.453293][T25196] /dev/rnullb0: Can't open blockdev [ 719.467880][T25196] /dev/rnullb0: Can't open blockdev [ 719.473086][T25129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.475183][T13280] usb 9-1: USB disconnect, device number 81 [ 719.482137][T25196] /dev/rnullb0: Can't open blockdev [ 719.493362][T25196] /dev/rnullb0: Can't open blockdev [ 719.499849][T25196] /dev/rnullb0: Can't open blockdev [ 719.505969][T25196] /dev/rnullb0: Can't open blockdev [ 719.511791][T25196] /dev/rnullb0: Can't open blockdev [ 719.517407][T25196] /dev/rnullb0: Can't open blockdev [ 719.523752][T25196] /dev/rnullb0: Can't open blockdev [ 719.531479][T25196] /dev/rnullb0: Can't open blockdev [ 719.537445][T25196] /dev/rnullb0: Can't open blockdev [ 719.543427][T25196] /dev/rnullb0: Can't open blockdev [ 719.549178][T25196] /dev/rnullb0: Can't open blockdev [ 719.555237][T25196] /dev/rnullb0: Can't open blockdev [ 719.560800][T25196] /dev/rnullb0: Can't open blockdev [ 719.566637][T25196] /dev/rnullb0: Can't open blockdev [ 719.572743][T25196] /dev/rnullb0: Can't open blockdev [ 719.581495][T25196] /dev/rnullb0: Can't open blockdev [ 719.587597][T25196] /dev/rnullb0: Can't open blockdev [ 719.593210][T25196] /dev/rnullb0: Can't open blockdev [ 719.600208][T25196] /dev/rnullb0: Can't open blockdev [ 719.606251][T25196] /dev/rnullb0: Can't open blockdev [ 719.611841][T25196] /dev/rnullb0: Can't open blockdev [ 719.617940][T25196] /dev/rnullb0: Can't open blockdev [ 719.623630][T25196] /dev/rnullb0: Can't open blockdev [ 719.629587][T25196] /dev/rnullb0: Can't open blockdev [ 719.635281][T25196] /dev/rnullb0: Can't open blockdev [ 719.641376][T25196] /dev/rnullb0: Can't open blockdev [ 719.647026][T25196] /dev/rnullb0: Can't open blockdev [ 719.652806][T25196] /dev/rnullb0: Can't open blockdev [ 719.658695][T25196] /dev/rnullb0: Can't open blockdev [ 719.664499][T25196] /dev/rnullb0: Can't open blockdev [ 719.671343][T25196] /dev/rnullb0: Can't open blockdev [ 719.677030][T25196] /dev/rnullb0: Can't open blockdev [ 719.682982][T25196] /dev/rnullb0: Can't open blockdev [ 719.688534][T25196] /dev/rnullb0: Can't open blockdev [ 719.695266][T25196] /dev/rnullb0: Can't open blockdev [ 719.701387][T25196] /dev/rnullb0: Can't open blockdev [ 719.707003][T25196] /dev/rnullb0: Can't open blockdev [ 719.712704][T25196] /dev/rnullb0: Can't open blockdev [ 719.718221][T25196] /dev/rnullb0: Can't open blockdev [ 719.724237][T25196] /dev/rnullb0: Can't open blockdev [ 719.729996][T25196] /dev/rnullb0: Can't open blockdev [ 719.738191][T25196] /dev/rnullb0: Can't open blockdev [ 719.744664][T25196] /dev/rnullb0: Can't open blockdev [ 719.750975][T25196] /dev/rnullb0: Can't open blockdev [ 719.757666][T25196] /dev/rnullb0: Can't open blockdev [ 719.763787][T25196] /dev/rnullb0: Can't open blockdev [ 719.770474][T25196] /dev/rnullb0: Can't open blockdev [ 719.783061][T25196] /dev/rnullb0: Can't open blockdev [ 719.789214][T25196] /dev/rnullb0: Can't open blockdev [ 719.795023][T25196] /dev/rnullb0: Can't open blockdev [ 719.800928][T25196] /dev/rnullb0: Can't open blockdev [ 719.809418][T25196] /dev/rnullb0: Can't open blockdev [ 719.822268][T25196] /dev/rnullb0: Can't open blockdev [ 719.839212][T25196] /dev/rnullb0: Can't open blockdev [ 719.846313][T25196] /dev/rnullb0: Can't open blockdev [ 719.883237][T25214] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 719.891022][T25214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 720.101136][ T24] Process accounting resumed [ 720.171414][ T5986] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 720.353087][ T5986] usb 3-1: Using ep0 maxpacket: 32 [ 720.369436][ T5986] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 720.385508][ T5986] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 720.394143][ T5986] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 720.427904][ T5986] usb 3-1: config 1 has no interface number 0 [ 720.434104][ T5986] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 720.461205][ T5986] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 720.482354][ T5986] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 720.513095][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.539121][ T5986] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 720.611927][T13818] Bluetooth: hci4: command 0x0c1a tx timeout [ 720.669965][T25248] /dev/rnullb0: Can't open blockdev [ 720.746509][ T5986] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 720.881130][T13280] usb 3-1: USB disconnect, device number 31 [ 720.900213][T13280] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 721.408819][T25229] Process accounting resumed [ 721.743414][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 721.811206][T25313] /dev/rnullb0: Can't open blockdev [ 721.903846][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 721.910055][ T24] usb 3-1: config 0 has no interfaces? [ 721.919670][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 721.929133][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.937203][ T24] usb 3-1: Product: syz [ 721.941502][ T24] usb 3-1: Manufacturer: syz [ 721.946099][ T24] usb 3-1: SerialNumber: syz [ 721.953458][ T24] usb 3-1: config 0 descriptor?? [ 721.958825][T25320] __nla_validate_parse: 4 callbacks suppressed [ 721.958835][T25320] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4735'. [ 722.129787][T25326] /dev/rnullb0: Can't open blockdev [ 722.181799][T13818] bt_err_ratelimited: 121 callbacks suppressed [ 722.181830][T13818] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 722.186717][ T5986] usb 3-1: USB disconnect, device number 32 [ 722.465980][T25351] syzkaller1: entered promiscuous mode [ 722.473780][T25351] syzkaller1: entered allmulticast mode [ 722.740672][T25377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4744'. [ 722.756463][ T24] hid_parser_main: 206 callbacks suppressed [ 722.756482][ T24] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 722.781800][T13280] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 722.795416][ T24] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 722.834445][T13818] Bluetooth: hci4: command 0x0c1a tx timeout [ 722.962826][T13280] usb 9-1: Using ep0 maxpacket: 32 [ 722.972851][T13280] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 722.981239][T13280] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 722.992650][T13280] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 723.004069][T13280] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 723.017760][T13280] usb 9-1: config 0 interface 0 has no altsetting 0 [ 723.033932][T13280] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 723.043082][T13280] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 723.051629][T13280] usb 9-1: Product: syz [ 723.056127][T13280] usb 9-1: Manufacturer: syz [ 723.062439][T13280] usb 9-1: SerialNumber: syz [ 723.073969][T13280] usb 9-1: config 0 descriptor?? [ 723.087355][T13280] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 723.105299][T13280] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 723.187494][ T24] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 723.215057][T25416] /dev/rnullb0: Can't open blockdev [ 723.239419][T25418] tipc: Enabled bearer , priority 10 [ 723.247208][T25418] /dev/rnullb0: Can't open blockdev [ 723.259114][T25418] tmpfs: Unknown parameter 'usrquota' [ 723.303819][T13280] usb 9-1: USB disconnect, device number 82 [ 723.322124][T13280] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 723.356899][T25431] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4755'. [ 723.371155][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 723.385984][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 723.398874][T25437] netlink: 'syz.2.4756': attribute type 12 has an invalid length. [ 723.405051][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 723.418046][T25437] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4756'. [ 723.419013][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 723.437861][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.465565][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 723.484928][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.722128][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 723.727681][ T24] usbtmc 7-1:16.0: can't read capabilities [ 723.876999][T25448] /dev/rnullb0: Can't open blockdev [ 724.191380][T25458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.216576][ T24] usb 7-1: USB disconnect, device number 117 [ 724.227640][T25458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.327813][T25476] /dev/rnullb0: Can't open blockdev [ 724.438742][ T92] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 724.464220][T25482] /dev/rnullb0: Can't open blockdev [ 724.609787][ T92] usb 9-1: Using ep0 maxpacket: 32 [ 724.618030][ T92] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.632374][ T92] usb 9-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 724.641564][ T92] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.662168][ T92] usb 9-1: config 0 descriptor?? [ 724.677224][ T92] usbtouchscreen 9-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 724.734230][T25495] /dev/rnullb0: Can't open blockdev [ 724.895913][T25506] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 724.898688][ T24] usb 9-1: USB disconnect, device number 83 [ 724.906715][T25506] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 724.924464][T25506] overlayfs: failed to set uuid (56/file1, err=-13); falling back to uuid=null. [ 725.037565][ T92] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 725.208812][ T43] usb 7-1: new low-speed USB device number 118 using dummy_hcd [ 725.212560][ T92] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 725.227186][ T92] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 725.239493][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 31658, setting to 64 [ 725.251123][ T92] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.265867][ T92] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 725.274961][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.283014][ T92] usb 3-1: Product: syz [ 725.287291][ T92] usb 3-1: Manufacturer: syz [ 725.291883][ T92] usb 3-1: SerialNumber: syz [ 725.297879][ T92] usb 3-1: config 0 descriptor?? [ 725.303401][T25497] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 725.313297][ T92] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input72 [ 725.347737][ T43] usb 7-1: device descriptor read/64, error -71 [ 725.439721][T25528] /dev/rnullb0: Can't open blockdev [ 725.472710][T25533] netlink: 'syz.8.4771': attribute type 11 has an invalid length. [ 725.543397][T25497] /dev/rnullb0: Can't open blockdev [ 725.562775][ T24] usb 3-1: USB disconnect, device number 33 [ 725.604421][ T43] usb 7-1: new low-speed USB device number 119 using dummy_hcd [ 725.652693][T25559] /dev/rnullb0: Can't open blockdev [ 725.677335][T25561] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4776'. [ 725.687383][T25561] /dev/rnullb0: Can't open blockdev [ 725.717821][T25563] netlink: 'syz.9.4777': attribute type 1 has an invalid length. [ 725.725800][T25563] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4777'. [ 725.736527][T25563] nbd: illegal input index 393224 [ 725.754418][ T43] usb 7-1: device descriptor read/64, error -71 [ 725.872378][ T43] usb usb7-port1: attempt power cycle [ 725.952764][T25574] /dev/rnullb0: Can't open blockdev [ 726.074236][T25567] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 726.102440][T25567] File: /dev/rnullb0 PID: 25567 Comm: syz.9.4778 [ 726.203034][T25583] /dev/rnullb0: Can't open blockdev [ 726.246237][ T43] usb 7-1: new low-speed USB device number 120 using dummy_hcd [ 726.255319][T25585] /dev/rnullb0: Can't open blockdev [ 726.290234][ T43] usb 7-1: device descriptor read/8, error -71 [ 726.545594][ T43] usb 7-1: new low-speed USB device number 121 using dummy_hcd [ 726.579471][ T43] usb 7-1: device descriptor read/8, error -71 [ 726.663441][ T5986] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 726.706399][ T43] usb usb7-port1: unable to enumerate USB device [ 726.813846][ T5986] usb 3-1: device descriptor read/64, error -71 [ 727.069617][ T5986] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 727.152420][T25606] /dev/rnullb0: Can't open blockdev [ 727.220672][ T5986] usb 3-1: device descriptor read/64, error -71 [ 727.248582][T25608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.250260][T25608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.271730][T25608] /dev/rnullb0: Can't open blockdev [ 727.340200][ T5986] usb usb3-port1: attempt power cycle [ 727.349620][T25613] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 727.356703][T25613] /dev/rnullb0: Can't open blockdev [ 727.701998][ T5986] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 727.722746][ T5986] usb 3-1: device descriptor read/8, error -71 [ 727.846558][T25624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.856283][T25624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.866351][T25624] ./cgroup: Can't lookup blockdev [ 727.978832][ T5986] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 728.001879][ T5986] usb 3-1: device descriptor read/8, error -71 [ 728.119870][ T5986] usb usb3-port1: unable to enumerate USB device [ 728.169324][T13818] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 728.170126][T13818] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 728.444159][T25657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.455304][T25657] batadv_slave_0: entered promiscuous mode [ 728.511240][T25661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.520044][T25661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.531360][T25661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.541481][T25661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.550305][T13818] Bluetooth: hci1: Unknown advertising packet type: 0x7b [ 728.550332][T13818] Bluetooth: hci1: Malformed LE Event: 0x0d [ 728.563938][ T5986] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 728.586717][T25661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.595936][T25661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.730295][ T5986] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 728.739536][ T5986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.747562][ T5986] usb 7-1: Product: syz [ 728.752311][ T5986] usb 7-1: Manufacturer: syz [ 728.756924][ T5986] usb 7-1: SerialNumber: syz [ 728.768775][ T5986] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 728.786000][ T43] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 729.336850][T25687] /dev/rnullb0: Can't open blockdev [ 729.490627][T25691] /dev/rnullb0: Can't open blockdev [ 729.708344][T25701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.717409][T25701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.837604][ T9] usb 7-1: USB disconnect, device number 122 [ 730.032323][ T5922] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 730.107221][ T43] usb 7-1: Service connection timeout for: 256 [ 730.113442][ T43] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 730.122169][ T43] ath9k_htc: Failed to initialize the device [ 730.129468][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 730.194343][ T5922] usb 3-1: config 4 has an invalid interface number: 18 but max is 1 [ 730.202554][ T5922] usb 3-1: config 4 has no interface number 1 [ 730.208893][ T5922] usb 3-1: config 4 interface 0 has no altsetting 0 [ 730.215646][ T5922] usb 3-1: config 4 interface 18 has no altsetting 0 [ 730.224039][ T5922] usb 3-1: New USB device found, idVendor=1199, idProduct=9009, bcdDevice=af.f4 [ 730.233298][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.241422][ T5922] usb 3-1: Product: syz [ 730.245581][ T5922] usb 3-1: Manufacturer: syz [ 730.250313][ T5922] usb 3-1: SerialNumber: syz [ 730.449705][ T9] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 730.476449][T25704] /dev/rnullb0: Can't open blockdev [ 730.490011][ T5922] usb 3-1: unknown number of interfaces: 2 [ 730.493191][T25735] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4809'. [ 730.504336][ T5922] usb 3-1: USB disconnect, device number 38 [ 730.549486][T25745] netlink: 'syz.9.4809': attribute type 44 has an invalid length. [ 730.561481][T25735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.570573][T25735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.588529][ T9] usb 7-1: device descriptor read/64, error -71 [ 730.594677][T25735] /dev/rnullb0: Can't open blockdev [ 730.849466][ T9] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 730.886048][T25771] /dev/rnullb0: Can't open blockdev [ 730.943135][T25775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 730.995086][ T9] usb 7-1: device descriptor read/64, error -71 [ 731.117289][ T9] usb usb7-port1: attempt power cycle [ 731.433468][ T5986] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 731.486754][ T9] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 731.520105][ T9] usb 7-1: device descriptor read/8, error -71 [ 731.617551][ T5986] usb 9-1: Using ep0 maxpacket: 16 [ 731.624033][ T5986] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.636686][ T5986] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 731.647693][ T5986] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 731.657413][ T5986] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 731.668370][ T5986] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.684888][ T5986] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 731.694162][ T5986] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 731.711139][ T5986] usb 9-1: Manufacturer: syz [ 731.730604][ T5986] usb 9-1: config 0 descriptor?? [ 731.776742][ T9] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 731.810985][ T9] usb 7-1: device descriptor read/8, error -71 [ 731.822496][T25828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.832748][T25828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.929681][ T9] usb usb7-port1: unable to enumerate USB device [ 731.955833][T25797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.967500][T25797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.982326][T25797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.991761][T25797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.004942][T25797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.016559][T25797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.028161][T25797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.038876][T25797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.051186][T25797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.064322][T25797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.214150][ T5986] rc_core: IR keymap rc-hauppauge not found [ 732.220094][ T5986] Registered IR keymap rc-empty [ 732.248063][ T5986] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 732.278244][ T5986] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 732.290969][T25854] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4828'. [ 732.300780][ T5986] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 732.316979][ T5986] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input73 [ 732.331331][T25854] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4828'. [ 732.350498][T25854] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4828'. [ 732.360998][ T5986] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 732.368953][T25854] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4828'. [ 732.408320][ T5986] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 732.438650][ T5986] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 732.461125][ T5986] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 732.503008][ T5986] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 732.524808][ T5986] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 732.569772][ T5986] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 732.601751][ T5986] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 732.621121][ T5986] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 732.641844][ T5986] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 732.665879][ T5986] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 732.678788][ T5986] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 732.694748][ T5986] usb 9-1: USB disconnect, device number 84 [ 732.795162][T25892] 9p: Bad value for 'rfdno' [ 732.803127][T25893] 9p: Bad value for 'rfdno' [ 732.829513][T25897] program syz.2.4835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 732.884147][T25904] /dev/rnullb0: Can't open blockdev [ 733.037537][ T5986] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 733.186598][T25916] /dev/rnullb0: Can't open blockdev [ 733.315762][ T5986] usb 9-1: Using ep0 maxpacket: 16 [ 733.325833][ T5986] usb 9-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 733.346296][ T5986] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.375877][ T5986] usb 9-1: Product: syz [ 733.380877][ T5986] usb 9-1: Manufacturer: syz [ 733.385482][ T5986] usb 9-1: SerialNumber: syz [ 733.418469][ T5986] usb 9-1: config 0 descriptor?? [ 733.435739][ T5986] usb 9-1: selecting invalid altsetting 1 [ 733.482066][ T5986] technisat-usb2: could not set alternate setting to 0 [ 733.657308][ T5986] technisat-usb2: firmware version: 0.0 [ 733.669571][ T5986] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 733.876751][T25876] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4833'. [ 733.915084][T25876] /dev/rnullb0: Can't open blockdev [ 733.924717][ T5986] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 733.949913][ T5986] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 733.967680][ T5986] usb 9-1: media controller created [ 733.976044][ T5986] technisat-usb2: i2c-error: out failed 53 = -22 [ 733.987415][ T5986] dvb-usb: MAC address reading failed. [ 734.008323][ T5986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 734.074570][ T5986] DVB: Unable to find symbol stv090x_attach() [ 734.096703][ T5986] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 734.174092][ T5986] rc_core: IR keymap rc-technisat-usb2 not found [ 734.180487][ T5986] Registered IR keymap rc-empty [ 734.190308][ T5986] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 734.217366][ T5986] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input74 [ 734.234479][ T5986] dvb-usb: schedule remote query interval to 100 msecs. [ 734.247870][ T5986] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 734.270784][T25955] netlink: 'syz.6.4847': attribute type 21 has an invalid length. [ 734.285334][ T5986] usb 9-1: USB disconnect, device number 85 [ 734.309974][T25955] netlink: 'syz.6.4847': attribute type 1 has an invalid length. [ 734.341606][ T5986] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 734.392142][T25972] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 734.410550][T25972] /dev/rnullb0: Can't open blockdev [ 734.464030][T25976] sctp: [Deprecated]: syz.2.4852 (pid 25976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 734.464030][T25976] Use struct sctp_sack_info instead [ 734.885372][T26002] /dev/rnullb0: Can't open blockdev [ 734.980219][T26005] /dev/rnullb0: Can't open blockdev [ 737.163120][T13818] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 738.269390][T26018] /dev/nullb0: Can't open blockdev [ 738.630218][T26028] vxcan1: entered allmulticast mode [ 739.191884][T26031] netlink: 260 bytes leftover after parsing attributes in process `syz.9.4865'. [ 739.214013][T26032] netlink: 260 bytes leftover after parsing attributes in process `syz.9.4865'. [ 739.230761][T26031] /dev/rnullb0: Can't open blockdev [ 739.283323][T26034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.309593][T26034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.345147][T26034] netlink: 'syz.9.4866': attribute type 27 has an invalid length. [ 739.433400][T26034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 740.459824][T26058] /dev/rnullb0: Can't open blockdev [ 740.579930][T26064] /dev/sg0: Can't lookup blockdev [ 740.678558][T26068] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 740.711121][T26068] mkiss: ax0: crc mode is auto. [ 741.608269][T26077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 742.148261][T26111] syzkaller1: entered promiscuous mode [ 742.159128][T26111] syzkaller1: entered allmulticast mode [ 742.178763][T26111] netlink: 'syz.6.4886': attribute type 1 has an invalid length. [ 742.208381][T26111] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4886'. [ 742.386622][T26119] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 742.431981][ C0] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 742.432149][T26119] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 742.438083][ C0] CPU: 0 UID: 0 PID: 26101 Comm: syz.2.4883 Not tainted syzkaller #0 PREEMPT(full) [ 742.448844][T26119] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 742.455817][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 742.474183][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 742.480446][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 742.500053][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 742.506115][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff88802e339c80 [ 742.514072][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888024270000 [ 742.522028][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 742.529987][ C0] R10: dffffc0000000000 R11: ffffffff88f963e0 R12: dffffc0000000000 [ 742.537944][ C0] R13: ffff88802e339c38 R14: 0000000000000000 R15: ffff88802e339c00 [ 742.545903][ C0] FS: 00007f7ea1f876c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 742.554822][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 742.561394][ C0] CR2: 00007ff90bddef98 CR3: 000000008703a000 CR4: 00000000003526f0 [ 742.569389][ C0] Call Trace: [ 742.572660][ C0] [ 742.575495][ C0] ? __pfx_das16m1_ai_munge+0x10/0x10 [ 742.580855][ C0] comedi_buf_write_samples+0x369/0x5a0 [ 742.586389][ C0] das16m1_handler+0x213/0x4b0 [ 742.591151][ C0] das16m1_interrupt+0xaf/0x180 [ 742.595990][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 742.601450][ C0] __handle_irq_event_percpu+0x289/0x980 [ 742.607111][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 742.613248][ C0] ? rcu_is_watching+0x15/0xb0 [ 742.618267][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 742.623450][ C0] handle_irq_event+0x8b/0x1e0 [ 742.628204][ C0] ? handle_edge_irq+0x229/0xa10 [ 742.633132][ C0] handle_edge_irq+0x23b/0xa10 [ 742.637881][ C0] __common_interrupt+0x141/0x1f0 [ 742.642890][ C0] common_interrupt+0xb6/0xe0 [ 742.647555][ C0] [ 742.650470][ C0] [ 742.653387][ C0] asm_common_interrupt+0x26/0x40 [ 742.658396][ C0] RIP: 0010:__asan_memset+0x22/0x50 [ 742.663684][ C0] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 7e e4 ff ff <84> c0 74 11 4c 89 f7 89 ee 48 89 da 5b 41 5e 5d e9 c9 ca 61 09 31 [ 742.683292][ C0] RSP: 0018:ffffc90003f56b38 EFLAGS: 00000256 [ 742.689372][ C0] RAX: 1ffff920007ead01 RBX: 0000000000000010 RCX: ffffffff8173edc8 [ 742.697352][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90003f56c78 [ 742.705334][ C0] RBP: 0000000000000000 R08: ffffc90003f56c87 R09: 1ffff920007ead90 [ 742.713617][ C0] R10: dffffc0000000000 R11: fffff520007ead91 R12: ffffc90003f57728 [ 742.721579][ C0] R13: ffffc90003f56c78 R14: ffffc90003f56c78 R15: ffffc90003f56c70 [ 742.729544][ C0] ? unwind_next_frame+0xc98/0x2390 [ 742.734760][ C0] ? __asan_memset+0x22/0x50 [ 742.739335][ C0] unwind_next_frame+0xc98/0x2390 [ 742.744381][ C0] ? unwind_next_frame+0xa5/0x2390 [ 742.749482][ C0] ? file_write_and_wait_range+0x23e/0x340 [ 742.755467][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 742.761629][ C0] arch_stack_walk+0x11c/0x150 [ 742.766399][ C0] ? blkdev_fsync+0x74/0xd0 [ 742.770896][ C0] stack_trace_save+0x9c/0xe0 [ 742.775570][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 742.780941][ C0] ? page_vma_mkclean_one+0x6de/0x740 [ 742.786317][ C0] ? blk_integrity_merge_bio+0x8f/0x370 [ 742.791851][ C0] kasan_save_track+0x3e/0x80 [ 742.796541][ C0] ? kasan_save_track+0x3e/0x80 [ 742.801464][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 742.806560][ C0] ? kmem_cache_alloc_noprof+0x1ad/0x390 [ 742.812244][ C0] ? mempool_alloc_noprof+0x1a7/0x510 [ 742.817606][ C0] ? bio_alloc_bioset+0x241/0x1110 [ 742.822813][ C0] ? submit_bh_wbc+0x22e/0x520 [ 742.827569][ C0] ? __block_write_full_folio+0x810/0xe10 [ 742.833278][ C0] ? blkdev_writepages+0xd1/0x170 [ 742.838282][ C0] ? do_writepages+0x32e/0x550 [ 742.843033][ C0] ? file_write_and_wait_range+0x23e/0x340 [ 742.848922][ C0] ? lock_acquire+0x5f/0x360 [ 742.853584][ C0] __kasan_slab_alloc+0x6c/0x80 [ 742.858426][ C0] kmem_cache_alloc_noprof+0x1ad/0x390 [ 742.863891][ C0] ? mempool_alloc_noprof+0x1a7/0x510 [ 742.869268][ C0] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 742.875166][ C0] mempool_alloc_noprof+0x1a7/0x510 [ 742.880400][ C0] ? lock_release+0x4b/0x3e0 [ 742.884978][ C0] ? mod_memcg_lruvec_state+0x1bb/0x370 [ 742.890515][ C0] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 742.896048][ C0] ? rcu_is_watching+0x15/0xb0 [ 742.900981][ C0] ? __pfx_mempool_alloc_noprof+0x10/0x10 [ 742.906689][ C0] ? percpu_counter_add_batch+0xea/0x1e0 [ 742.912313][ C0] bio_alloc_bioset+0x241/0x1110 [ 742.917243][ C0] submit_bh_wbc+0x22e/0x520 [ 742.922005][ C0] __block_write_full_folio+0x810/0xe10 [ 742.927546][ C0] ? __pfx_blkdev_get_block+0x10/0x10 [ 742.932924][ C0] blkdev_writepages+0xd1/0x170 [ 742.937764][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 742.943304][ C0] ? rcu_is_watching+0x15/0xb0 [ 742.948058][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 742.953503][ C0] do_writepages+0x32e/0x550 [ 742.958082][ C0] ? rcu_is_watching+0x15/0xb0 [ 742.962832][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 742.968025][ C0] file_write_and_wait_range+0x23e/0x340 [ 742.973646][ C0] ? __pfx_file_write_and_wait_range+0x10/0x10 [ 742.979798][ C0] ? __up_read+0x280/0x680 [ 742.984204][ C0] blkdev_fsync+0x74/0xd0 [ 742.988545][ C0] generic_write_sync+0x1b3/0x290 [ 742.993647][ C0] ? blkdev_write_iter+0x5ef/0x710 [ 742.998751][ C0] blkdev_write_iter+0x5fa/0x710 [ 743.003691][ C0] iter_file_splice_write+0x975/0x10e0 [ 743.009177][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 743.015076][ C0] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 743.020436][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 743.026317][ C0] direct_splice_actor+0x101/0x160 [ 743.031418][ C0] splice_direct_to_actor+0x5a5/0xcc0 [ 743.036788][ C0] ? __pfx_direct_splice_actor+0x10/0x10 [ 743.042414][ C0] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 743.048295][ C0] do_splice_direct+0x181/0x270 [ 743.053130][ C0] ? __pfx_do_splice_direct+0x10/0x10 [ 743.058490][ C0] ? common_file_perm+0x1b5/0x230 [ 743.063505][ C0] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 743.069386][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 743.074747][ C0] ? security_file_permission+0x75/0x290 [ 743.080384][ C0] ? rw_verify_area+0x255/0x4d0 [ 743.085241][ C0] do_sendfile+0x4da/0x7e0 [ 743.089663][ C0] ? __pfx_do_sendfile+0x10/0x10 [ 743.094596][ C0] ? __se_sys_futex+0x36f/0x400 [ 743.099461][ C0] __se_sys_sendfile64+0x13e/0x190 [ 743.104563][ C0] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 743.110183][ C0] ? rcu_is_watching+0x15/0xb0 [ 743.114936][ C0] do_syscall_64+0xfa/0xfa0 [ 743.119434][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.125501][ C0] ? clear_bhb_loop+0x60/0xb0 [ 743.130185][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.136073][ C0] RIP: 0033:0x7f7ea118ebe9 [ 743.140480][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.160428][ C0] RSP: 002b:00007f7ea1f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 743.168854][ C0] RAX: ffffffffffffffda RBX: 00007f7ea13b5fa0 RCX: 00007f7ea118ebe9 [ 743.176911][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 743.184878][ C0] RBP: 00007f7ea1211e19 R08: 0000000000000000 R09: 0000000000000000 [ 743.192837][ C0] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 743.200798][ C0] R13: 00007f7ea13b6038 R14: 00007f7ea13b5fa0 R15: 00007fff4db00bb8 [ 743.208788][ C0] [ 743.211809][ C0] Modules linked in: [ 743.215699][ C0] ---[ end trace 0000000000000000 ]--- [ 743.221159][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 743.227229][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 743.246827][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 743.252904][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff88802e339c80 [ 743.260860][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888024270000 [ 743.268902][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 743.276858][ C0] R10: dffffc0000000000 R11: ffffffff88f963e0 R12: dffffc0000000000 [ 743.284845][ C0] R13: ffff88802e339c38 R14: 0000000000000000 R15: ffff88802e339c00 [ 743.292818][ C0] FS: 00007f7ea1f876c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 743.301822][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 743.308397][ C0] CR2: 00007ff90bddef98 CR3: 000000008703a000 CR4: 00000000003526f0 [ 743.316377][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 743.323843][ C0] Kernel Offset: disabled [ 743.328183][ C0] Rebooting in 86400 seconds..