last executing test programs: 7m45.366647539s ago: executing program 3 (id=190): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8fb85f696f1f3fbc, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) recvmsg$inet_nvme(r4, &(0x7f00000005c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/33, 0x21}, {&(0x7f0000000440)=""/68, 0x44}, {&(0x7f00000004c0)=""/172, 0xac}], 0x3}, 0x2060) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0xe, &(0x7f0000001480)="5579d8ba", 0x4) (async) mount$cgroup(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x18, &(0x7f0000000200)={[{@name={'name', 0x3d, ']-1\x1e\x01~\xe1\xec\aD0\xab\xa5\xf4\xda\x02A\x9aS\xce\xb8\xad\xbc\xe4?\x8f0\x88\xc8\xe9\xf8\"%\x89\x93\x88\xe7/L\xd1\x01\x8c\xbe\xb4Fx\x1f\xdc\xa1I\xde\x9bb{\xfe\x88}_\xa2\x99\x8b\xc0C\x83\x97\x87\xfb\x84\xa8*\xf1\xe2\x8d\xf1\b\xba\x7f\\'}}]}) (async) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x1, 0x11, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb00002b700000785d9600000500000000080000000000000000000100", "28090100bdb22d0000b420a1a93c52070000009b01177d3d458dd4992861ac000000000000000200", "90d05ee6b6480000000000b6c6c19d0000000002101300001f9238000700", [0x0, 0xfffffffffffffff8]}}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x4, 0xfffffffa, 0x90000, 0x8, 0x9, 0xffffffffffffffff}) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) rt_tgsigqueueinfo(r8, r9, 0x2d, &(0x7f0000000340)={0x33, 0x0, 0x6}) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r4, {0x858}}, './file0\x00'}) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o\b', 0x2}], 0x1}}], 0x1, 0x24008011) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x1010, r0, 0xef1a8000) 7m45.197270112s ago: executing program 3 (id=193): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000a4b000/0x2000)=nil, 0x2000}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x6, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f00000005c0)={0x4, 0xffffffff, 0x3, 0x4, 0x3, "91db267df87861c509f311ef31e719abd9363d"}) r6 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) 7m45.170889705s ago: executing program 2 (id=194): r0 = syz_clone(0x20000, &(0x7f0000000000)="b6620a1e27b304ba41ebdbb43f2443961b711ff9cde63d3d50fe30d6e38aa86bd407d54eb218cbd26c0d0550595ab55c923242140d9dd53640d7d3b7e7f732b8b8eda54b544bf4669212f545a812e84c48af14eba0a806d0b3737680f06ee1f355a0d16a9279a7b473b297a0fb22781dbb5380261fe40783cf7520823feb493c17459208953d4a508b31c317bead2a6e05b7a511cc16aff7c7ca16c2b23e61e279b04e2aa4f2db1cd40ebecf2bb77b24f07d9e0b361bdce19967efcafc696267bc8e22d21d99a39ce544b0985ad51543d1997f2a1a348d", 0xd7, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="80c55276ba6a0e0fa78c744088057fd795a3a2c4a92f48e53a86682fd24d970b10f1de2295fc642d9331c6c1a2a8f80c308fa35873c08d54edce91535bd0ed36305b5a569c6aeb459115dd4cba33181a6010694b59664ad5feeb2c55798433a8098ea482d38a116d1f0c054327b81e0b44bcc9a3a0331d26f0dab809") get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18) get_robust_list(r0, &(0x7f0000000500)=&(0x7f00000004c0)={&(0x7f0000000400)={&(0x7f00000003c0)}, 0x0, &(0x7f0000000480)={&(0x7f0000000440)}}, &(0x7f0000000540)=0x18) set_robust_list(&(0x7f0000000680)={&(0x7f00000005c0)={&(0x7f0000000580)}, 0x5, &(0x7f0000000640)={&(0x7f0000000600)}}, 0x18) set_robust_list(&(0x7f0000000740)={0x0, 0x8, &(0x7f0000000700)={&(0x7f00000006c0)}}, 0x18) r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x25, &(0x7f0000000780)={0x24, 0xffffff28, 0x8}) (async) set_robust_list(&(0x7f00000008c0)={&(0x7f0000000800), 0x5, &(0x7f0000000880)={&(0x7f0000000840)}}, 0x18) (async) get_robust_list(r0, &(0x7f0000000940)=&(0x7f0000000900), &(0x7f0000000980)=0x18) (async) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000009c0)=""/99) (async) prlimit64(r0, 0x2, &(0x7f0000000a40)={0x401, 0xdae3}, &(0x7f0000000a80)) (async) sched_setparam(r1, &(0x7f0000000ac0)=0x7) (async) get_robust_list(r1, &(0x7f0000000c40)=&(0x7f0000000c00)={&(0x7f0000000b40)={&(0x7f0000000b00)}, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)}}, &(0x7f0000000c80)=0x18) get_robust_list(r1, &(0x7f0000000d80)=&(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)}}, &(0x7f0000000dc0)=0x18) get_robust_list(r1, &(0x7f0000000ec0)=&(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)}}, &(0x7f0000000f00)=0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000f40)) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000fc0)={0x0, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x3d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000001180)) (async) r6 = syz_clone3(&(0x7f0000001480)={0x208000, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240)=0x0, {0x3b}, &(0x7f0000001280)=""/218, 0xda, &(0x7f0000001380)=""/159, &(0x7f0000001440)=[r0, r1, r0, r1, r1, 0xffffffffffffffff, r1, r0, r1], 0x9}, 0x58) get_robust_list(r6, &(0x7f0000001640)=&(0x7f0000001600)={&(0x7f0000001540)={&(0x7f0000001500)}, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)}}, &(0x7f0000001680)=0x18) (async) sendmsg$nl_generic(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x5c, 0x12, 0x300, 0x70bd28, 0x25dfdbfe, {0x7}, [@generic="7003039371588ca13a143de46a88a87d1c37c1b24c17684373cfec21ff71a5635df823e72f0712111df75f2036f8cd80f2d3669d35148d98bfb80af700caa072933e4afca2fc67"]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4011) (async) get_robust_list(r7, &(0x7f00000018c0)=&(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)}}, &(0x7f0000001900)=0x18) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001980), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001e40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e00)={&(0x7f00000019c0)={0x420, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x40c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc8, 0x5, "d05a929326d967a877fdb8c5f6f40fa2188c1fa59d6c500359d4550d5bfb91da96752695934dc9d2ae063f4464fd65d0b5df2ad5dbeede0e2b4e9098dbe451fbecf3ae0f02fd5f30c8a28f74f464a86a18460154c9b25d6667cc154e373615b23c80ca8757a4fe825a2d061639924c9e9979466042c27030fb47e008bcabe6c4afe24db001d5d3abab686b425d7a362602a98e99daf5707028d56bce2139d2e7189460f6194306280586d681a6e4cb80433b1845583e958a5fc16c857e0221eb86638759"}, @ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/vhost-vsock\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\'(:]^}+/\\}/#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\'%\xa4{/,-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/vhost-vsock\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/vhost-vsock\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '@!*,()().+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@(&+{!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}]}, @ETHTOOL_A_BITSET_BITS={0x1b4, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x42}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc17}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/vhost-vsock\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*\\)&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/vhost-vsock\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@+#*\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/vhost-vsock\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/vhost-vsock\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "7576f283e90e1d607e32f78734b16d24829a5a029746334b5e4691042813d7d062c6633e0cf283"}]}]}, 0x420}, 0x1, 0x0, 0x0, 0x8000}, 0x94) (async) get_robust_list(r7, &(0x7f0000001f40)=&(0x7f0000001f00)={&(0x7f0000001e80), 0x0, &(0x7f0000001ec0)}, &(0x7f0000001f80)=0x18) 7m45.060067095s ago: executing program 2 (id=195): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@local, 0x4e23, 0x0, 0x4e23, 0x1, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3, 0x3}, [@mark={0xc, 0x15, {0x350759, 0x7}}]}, 0xc4}}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r2, 0xebe3b000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000000)=0x30, 0x1) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) 7m44.869966113s ago: executing program 3 (id=197): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x1f972000) madvise(&(0x7f0000361000/0x1000)=nil, 0x1000, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/l2cap\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 7m44.814333652s ago: executing program 2 (id=198): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a6f82, 0x0) (async, rerun: 64) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) (rerun: 64) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000100)={0x1, 0x42303159, 0x500, 0x2cd, 0x1, @stepwise={{0xffffffff, 0x4}, {0x5, 0x7f}, {0x3, 0x1}}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) 7m44.752515735s ago: executing program 3 (id=200): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f0000000080)) (async) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000040)=0x100000001, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0585604, &(0x7f0000000180)={0x0, 0xffffc000}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)=""/55, 0x37}, {&(0x7f00000000c0)=""/181, 0xb5}, {&(0x7f0000000180)=""/164, 0xa4}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/40, 0x28}, {&(0x7f0000000380)=""/30, 0x1e}, {&(0x7f00000003c0)=""/192, 0xc0}], 0x8, 0x4, 0x410) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x5, r4, &(0x7f0000000080), 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1f, 0x0) (async) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x0, 0x5004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 7m44.62760609s ago: executing program 2 (id=202): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x58f, 0x9410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x10, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000200)={0x20, 0x25, 0x5, {0x5, 0x32, '&Wd'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) fadvise64(r0, 0x94, 0x2000000000006e, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 7m44.382958679s ago: executing program 3 (id=206): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001030000000904290202b48cbb0009050402100000fa0009058202400000000015550a4c72d44e9e66063b26302b55d5eabc13347e8cadd0b45b96e5a36f241ae7ca8d5306863479bc32fc218834ce918db89a06dc4df3f21ee6ce55d77fcb480000"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x15, 0x6, "2c9792d6fdaa"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000880)=0x3f, 0x4) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$BLKRRPART(r0, 0x125f, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001030000000904290202b48cbb0009050402100000fa0009058202400000000015550a4c72d44e9e66063b26302b55d5eabc13347e8cadd0b45b96e5a36f241ae7ca8d5306863479bc32fc218834ce918db89a06dc4df3f21ee6ce55d77fcb480000"], 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x15, 0x6, "2c9792d6fdaa"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000880)=0x3f, 0x4) (async) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 7m19.337460128s ago: executing program 2 (id=214): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000) 7m19.329171088s ago: executing program 1 (id=220): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x90281, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000f3ffff054d564b"]) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000f3ffff054d564b"]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x9, 0x0, 0x2, 0x2, 0xe, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf411119ed8bebbbd, 0x20011, r0, 0xe6a64000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000340)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) (async) bind$802154_dgram(r3, &(0x7f0000000340)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x6, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x1ff, 0x66, 0x0, 0x4}, {0x6, 0x2, 0x38}, {0x7f, 0xa, 0x5d, 0x6}, {0x6, 0x8, 0x9f, 0xa43}, {0x4, 0x5, 0x0, 0x5}]}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x6, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x1ff, 0x66, 0x0, 0x4}, {0x6, 0x2, 0x38}, {0x7f, 0xa, 0x5d, 0x6}, {0x6, 0x8, 0x9f, 0xa43}, {0x4, 0x5, 0x0, 0x5}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x3, 0x0) ioctl$sock_proto_private(r5, 0x89e0, &(0x7f00000006c0)) (async) ioctl$sock_proto_private(r5, 0x89e0, &(0x7f00000006c0)) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x32403, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x32403, 0x0) ioctl$EVIOCGPROP(r7, 0x80404509, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1f1400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f0000000040)={0xc, r9}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f0000000040)={0xc, r9}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, r9}) 7m19.328988511s ago: executing program 2 (id=221): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x9, 0x0, 0x2, 0x2, 0xe, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x1c, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x48, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xcec}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8000}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x1}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x2}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x401}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x20, 0x1) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 7m19.328566314s ago: executing program 3 (id=222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 7m19.15062028s ago: executing program 1 (id=225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x484002, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0x4, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r4, 0x100, 0x2070bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x2d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x24000840) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000080)={0x5}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0xffffffff, @empty, 0x1}}, 0x6, 0x1c0}, 0x90) sendmmsg$inet6(r2, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback, 0x80}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000000)='X', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0x8000000, @empty, 0xffffffc0}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000300)="18b14f2736f3e8f720c99bbcd4ccafd00d1863db1fc67c7362b945adc465c359de42e1db61a5a1bfff8e943a19d6b3eafec53d54172abfc3556fcaf262421ce88b7ce62dbf01831b2681721937ab403ba95d284aa9f8b0cbdc6dfb90be46c49408a63cc217157c91d6de6a2122afa7dc3e47d6b82c", 0x75}, {&(0x7f0000000380)="23a3237536dea2fded15b123031d1e4813adbf85a1c8632976f26e6aaea46fecfd67b223233fcd1e7b74d2795e50c6239ff2f9714d06b975bbd412d4cc8fafecaefedf80b574c2f1f289a18c5a7329435ca6cff82db399540c6f78bbd10d54701aee63dbd82b13b293056d48b42d24baaf3bd9f90b39fb59cb977e80196122ea54621d75118271548e5c96d242f1a6247107e40393e48f0603dc6dc010a7a44681dfd85aecf2bf81cc6ba23aab1b3694bcb9cf89979890e40a66c456ddbc997c358fe8a35c45192ac47795d6f7edac852dfa39f05aafe6ae62233d37d71002f650ebc8ada571ef97", 0xe8}, {&(0x7f0000000480)="25d662a8fdb23252dbdb6ed315ed9ef4d3466092ff485e94b1d8be08ef520d2cd0b1cb95a94144af91152ecdc95e0c8847db38c76b9696473c2e2d94726fd96a06eb237e3a09673b4958abc2ed64f08c15ffc8f0d7f965d2867bb8b37c94484216b8b8f147ce1d35f1e95b99a6483f", 0x6f}, {&(0x7f0000000500)="d34826a7e89791474999613ee373c0b2ce7e1adbaf89c7fc951fc4c885256de14d0fe6ee5add792897a357947e2b9e93b63e10d938127989a5c7dc6208caa6b51d5f3a0105b273bda2fa9a6e36e3672383f97789af0765778b7c3df005e6d0cd89b3602d5c437e78d4810d9dab7bcf21f81e01c61460045e0bec7a3200ab498f7bb807a68f0be559f225fe5fb24b742abf0823c0eca79d7a5441fdb0da928eec52d50ab7f7df17409fc7b257cf7a5579e71f918edd98ad888ba806b5906144fa708fea190c3711d331175845443948485e", 0xd1}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000000600)="7c548f95fa5f10373680c82297b36eecb9687e3e95def26d4562a56d4caa232f1ea3539ee8117adea01ceb453cffb3ba5ea31f448cea7011b2c109fd9167974f1f53dbf05395ed088d03adb34ebe2329e7d5c9d455754b3e2e2415db173d0b8b1760f135bf85b22e1133774650c21f4c8359a62d4c0af03fc76b2c9961e6ce9547c0b84c76aad13e4c3a5ad655bc066a0d6885e014de4c7ab07bbba8604dfa3ae5bf7a471124988d48598c2f04d1f040174c8ec325eff58cee52feb020a148c528afab595c450252cebc0f50a966ed470f37cc2d0e53f3642a2f50828b24562b", 0xe0}], 0x7, &(0x7f0000002a40)=[@hopopts={{0xb8, 0x29, 0x36, {0x36, 0x13, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0xffff7f83}, @pad1, @hao={0xc9, 0x10, @mcast1}, @enc_lim, @hao={0xc9, 0x10, @mcast1}, @generic={0x95, 0x21, "0f079dd8007d5ec41c4289026ae90d4c3d559a1057416754005a02169d0554a690"}, @calipso={0x7, 0x40, {0x3, 0xe, 0x9, 0x0, [0x8000, 0xf9, 0x1, 0x1, 0x10, 0x4, 0xffffffffffffff69]}}, @enc_lim={0x4, 0x1, 0x8}]}}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x62, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x7, 0x84d, [0xc11b, 0x7fff, 0x1ff, 0x6, 0x6d1]}}, @ra={0x5, 0x2, 0x1}]}}}], 0x108}}], 0x2, 0x20048001) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000780)={'ip6_vti0\x00', @broadcast}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000840)='ecryptfs\x00', 0x200000, 0x0) 7m18.949395636s ago: executing program 1 (id=226): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x5, 0x80000001, 0xedbb}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0), 0x95) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000100)) creat(&(0x7f0000000000)='./file0\x00', 0x1ea) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 7m18.931537284s ago: executing program 1 (id=228): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xac) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000100)={0x0, 0x30, ""/48}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0xfffffffffffffffe, 0x7}}, 0x30) 7m18.77020542s ago: executing program 1 (id=230): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = dup2(r1, r0) fanotify_init(0x40, 0x1000) read$FUSE(r2, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 7m18.626368506s ago: executing program 1 (id=231): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (rerun: 32) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) (async) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f0000000080)="010000000300060000071a80000001cc", 0x10) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) 7m1.538181677s ago: executing program 32 (id=232): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) r1 = syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000c, 0x12, r1, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x181101, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmsg(r2, &(0x7f0000002140)={0x0, 0x0, 0x0}, 0x40000040) (async) creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 7m1.505104797s ago: executing program 33 (id=231): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (rerun: 32) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) (async) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f0000000080)="010000000300060000071a80000001cc", 0x10) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) 6m59.588493662s ago: executing program 34 (id=221): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x9, 0x0, 0x2, 0x2, 0xe, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x1c, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x48, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xcec}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8000}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x1}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x2}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x401}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x20, 0x1) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 6m59.486200729s ago: executing program 35 (id=222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 5m26.511297565s ago: executing program 5 (id=698): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x40, 0x0, {0x0, 0x8, 0x0, 0x2, 0x3, 0x2, 0x0, 0x43969, 0xb57, 0xc000, 0x0, r3, r4, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x88101, 0x0) write$tcp_congestion(r5, 0x0, 0x0) r6 = dup2(r5, r1) fallocate(r6, 0x10, 0x9, 0x3ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbe000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001fc0)={0xfc, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_FRAME={0x51, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac, {0x9}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1012, 0x7, @device_a, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x12}]}, @val={0x2d, 0x1a, {0x300, 0x0, 0x0, 0x0, {0x10001, 0x3, 0x0, 0x259, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x800, 0x3}}}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbb0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1000}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d9345", 0xc3}], 0x1}, 0x20004804) r7 = socket(0x10, 0x803, 0x0) unshare(0x20040600) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 5m25.429305718s ago: executing program 5 (id=704): r0 = socket(0x8000000010, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000000000407dd74e2c0000000000010902240001000000000904000001030000000921000000011407000905810300"], 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x38, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="3170d5cb1bc451e04e70f5549e82ac73"}]}]}, 0x38}], 0x1}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x804) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000000)='xfs\x00', 0x1200051, 0x0) getxattr(&(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="726e756511796c6c96457d7d0e52b65235d89e664b1541093ba1317ef79554c77548d7914079aa8c1b0744c517d1db83a7c5c22f5e33fb17b04692c859ab11edc294ccad7943b0bc4aa0afc971b137af6b310d025247d7a175014a2b4fd068d758156c985f9b837311a2bdd6c6b9c6749858aa25b54682cc4e8db17054c5fabc75a986b5567b944f8e98f981ff24069741383ad0df71f213d91ebf6abeb00f900717b91f3b67ee13e2c3215b3dfb0ee86cbc55d2e4ce84c9b0d53dcace5ab325731acb04d692bff1dd472f4d745297ba2de2395106fbdcdc00"/231], &(0x7f0000000140)=""/105, 0x69) 5m25.121183514s ago: executing program 5 (id=706): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1203010902120001000000050904d3ff00de0d74006de354d53c1e37c2c76cf5d6c27a1b974f94a7deb75259c84162b7c0c291a9dd6cb8d6e967a51431fe8e1dd8b6183ddf99543294c78789ea61f26af2433ce3d03b6336e489a489603bd444579f4b7c49d47912bf48ce51057507001599cd60f61d2312f464afeb4fdb1de3fa065b4a8c7a14129ffc1bf025c4a7677a0d4eead29165d74f8b22d517515f153cd1208cf7860c3d0075ac08750729a0f1"], 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000e40)=""/4096, &(0x7f0000000080)=0x1000) socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000300)=""/190, &(0x7f0000000240)=0xbe) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)=ANY=[@ANYBLOB="f01402000000c392"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='exfat\x00', 0x204001, 0x0) 5m25.034796872s ago: executing program 36 (id=706): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1203010902120001000000050904d3ff00de0d74006de354d53c1e37c2c76cf5d6c27a1b974f94a7deb75259c84162b7c0c291a9dd6cb8d6e967a51431fe8e1dd8b6183ddf99543294c78789ea61f26af2433ce3d03b6336e489a489603bd444579f4b7c49d47912bf48ce51057507001599cd60f61d2312f464afeb4fdb1de3fa065b4a8c7a14129ffc1bf025c4a7677a0d4eead29165d74f8b22d517515f153cd1208cf7860c3d0075ac08750729a0f1"], 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000e40)=""/4096, &(0x7f0000000080)=0x1000) socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000300)=""/190, &(0x7f0000000240)=0xbe) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)=ANY=[@ANYBLOB="f01402000000c392"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='exfat\x00', 0x204001, 0x0) 4m5.045270963s ago: executing program 8 (id=1311): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd00000a0000008d40000064c80f5900641100fe800000000000000000000000e100aaff0200000000000000000000000000014e244e22006490780200000002000000010000002737f19c7d3c3653289a9104c02dbfdc70bea0431a23b0f8063fce146e39b05c869bbd9cf785d23a9cebb43d614789daf3f0cb8057706a65a051f8b0ad365751eea00bcb0bfb26a397f5a312ea0bb6b1"], 0x9a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYRES16=r6], 0x38}}, 0x0) writev(r4, &(0x7f0000000600)=[{&(0x7f0000000540)="89e7ee2c78dad9b4b473fec988ca54129f5f75d65adf43e2a0c6f6c648999948519197d892c4", 0x26}], 0x1) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) set_mempolicy(0x1, 0x0, 0x3ff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r10 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r10, &(0x7f0000000480), 0x2e9, 0xffe0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m3.748442964s ago: executing program 8 (id=1322): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x10010, r0, 0xa471a000) 4m3.509109323s ago: executing program 8 (id=1325): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000100800010001"], 0x1c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendfile(r1, r0, 0x0, 0x7fffefff) sendfile(r0, r0, 0x0, 0x7ffff000) 4m2.573032563s ago: executing program 8 (id=1328): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0xfffffffffffffe9a, 0x83, 0x1}}]}, 0x58}}, 0x4050) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040)={@private2, r5}, 0x14) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) 4m2.496626655s ago: executing program 8 (id=1329): mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3cc00000, 0x80, {0xffffffffffffffff}, {0xee01}, 0xfffffffffffffffb, 0x3}) timer_create(0x4, &(0x7f0000000100)={0x0, 0x2e, 0x4, @tid=r0}, &(0x7f0000000140)) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3cc00000, 0x80, {0xffffffffffffffff}, {0xee01}, 0xfffffffffffffffb, 0x3}) (async) timer_create(0x4, &(0x7f0000000100)={0x0, 0x2e, 0x4, @tid=r0}, &(0x7f0000000140)) (async) 4m2.472153517s ago: executing program 8 (id=1330): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) 3m47.457651053s ago: executing program 37 (id=1330): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) 2m53.813171108s ago: executing program 9 (id=1696): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYBLOB="c1"], 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000a, 0x12, r0, 0x147ce000) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0xa3, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x2, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000400)={0x10, 0x0, r4}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001040)="da60cd04a90df8b27c3a2e5b09b8855035dda8b6b2d9", 0x16}, {&(0x7f0000001180)="d757be678856122710bb75335c765d90dfc4abab3e3ea7e6a0cf5558497a238a38c645deb787c239bddaf78bfa663c3edf93f523022239d48947759e30f23d5e202746b4360094c92472626c678fd740a629b1a55461c6d3979ee8be04bcb36bc8447c0baac7f5791303ccf619a9714cfee3e33cef9e7d30d3de36deedbc6fa02c9d405bc042b314d141d42c7b4d5aa81380c60ae083fa14533a190b080393267de14f6e07d74e50f116b504a498e253f37d2f1bf452207556174c95316b4c2bba57139d86be85a6ea4163c7bfef2e5390b657b63737b85f505a9353f9ffd1967558665fdedbfd", 0xe7}, {&(0x7f0000001080)="be427c0100a17e", 0x7}, {&(0x7f0000001280)="a6b75f0d7d5997dcf25c96a6fd76ad9f623520992c2f6fec30e527cd01d6a14efd764fa03c83ba3db325e25b0272a92325582f0cf089fa139115f58313948522bafac6f9a088b0fff3ffaeff4e9ea1a5e97bc9af72f2f3c32560e5b0221abb304cdcdaaa53722d45e071817de00381eaa80046700314312206ffbafdf4da2aecffef", 0x82}, {&(0x7f0000001340)="96db5af7b107c637633310f21ce7bf602bfabe394d284770cffef655539a038e9471c8e7c0a59bee51db7645b095fa12df85ed3ff0d24f0c9a57dc834ebdf2d9f9fb5159412bd9b5f51f25ee3e8102e879de1334322d0144523c87788e60d611bb008b74f4b39c230fce1f6287caffb23505481b8642e33969d4f51cb9ee39b5fe01c57c06e5364218924033edb099941b465e8356766610dbd7c3b74a660a5e14d9ff4c7da6d32817c09e7f", 0xac}, {&(0x7f0000002540)="5acb81dcf6f831e1bcb6356ecb0aa6b86c9083c5e093b75f898d6846ed04868f005a496d728e432206ad6353084c1fc641956f082c5ffbd5ad2ca43f6b6aa27d2fde65118a801fba7500e25f", 0x4c}, {&(0x7f0000001400)="081121adc9c2fe043a1560284f4a20957326c5877799eef452266308bfac1dc2df5afdb7345083ca4b828ce93cc24a2a77a580385107e451f2f18bafc024c7a4513f00e8de35fef05222c6966de249c0948e4cf867e4b741c0a62a04e38aea2a92ea756f501ab42a000cec7a85914dd9fdbf4b2204ed8428db39f4705809000000cf3b9a7a8c140682c2e87a5f04b451ae7ea8c96a0000000000000000", 0x9d}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000010c0)}, {&(0x7f0000001100)="9a25437cd1edecc9691a2df9628e41d599efb084034d75c8b94290260d8f9a5ad5f20812246717aa4ed5989a81f70e219cd523abe55ec22090ef12", 0x3b}], 0xa, 0x0, 0x0, 0x7400}, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0xe) (async) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) (async) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async) r9 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12d23d34", 0x5, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8, r9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) (async) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[], 0xfe33) (async) r10 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r10, &(0x7f0000000000)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006c090890e0878f0e1ac6e7f89b334d959b4a9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f946684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430afc162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf50104350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb2a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b70ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9960ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831db5933d93994ba3064279b18a5bd27098ce536bea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9c0587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x1000}}, 0xcf8) (async, rerun: 32) syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) 2m53.666852379s ago: executing program 9 (id=1698): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r1 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000003000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000010000000000", @ANYRES32, @ANYBLOB="0000000000e001f0fffffeff00000000000000006d0f7153c84703ba7a1dccef0947cf42e5f07fd7906cfb461321a32b0813b583925535ed834827d409e21369933c57", @ANYRES32, @ANYBLOB="0000000000000000000000000000000001000000"]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000400)="b700000011005abeef4ba0d5984462732834d1f9ece5", 0x16}, {&(0x7f0000000540)="37a8a6c41ef711513a5554633f6ecf25", 0x10}], 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, r6, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "8be61958b0a7269e9d777f5869"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "add0a6b5628843fab9950cf6bf"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "1fd458d50c"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "850fb141cb39f6dd8761270f3c"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "e3a91f83e6003b49f2d9f127"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40080}, 0x20045) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r8, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x0, {0x99, 0x7, "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", 0x5, 0xe, 0x5, 0x9, 0xc6, 0x40, 0x5, 0x1}, r9}}, 0x128) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002400000000000f5"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r4}}, './cgroup\x00'}) 2m53.560194988s ago: executing program 9 (id=1699): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000a3c000/0x3000)=nil, 0x3000, 0x3800001, 0x4000010, r0, 0x63891000) r1 = open$dir(0x0, 0x50000, 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x5) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) (async) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r4 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYBLOB="f9658ef1113b409cf39c82d5e087820e39947da2cd49e6697ceb176ddca6aa6b1f13b2a41dee6505ede9be5d5c5fb128121427a0f31e778ce7ce7369a76817a06cab269989983e21e65b92b1a9f2ad9c3e0912198eccebe86895bf585dfcc415d0f3d90cd9c657b3ba2e5bc214bec881e88a31af4a3dae68118fbaa499dfe81c44a5b2a5fa1a186f920b2c830161bf138f15f74d8c5d676a562173fd254189eb78c227cb233bdae71e2297910f1d950032931a8252c65b001f8fa73ff0300b7e1d1833acda4076a67e701faaaedc8e1a91ee718d86baf9a81f2d5b0af025475f", @ANYRESHEX=r3], 0x0) syz_usb_control_io(r4, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r5, 0xc02063a1, 0x0) (async) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000040)=""/185) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000000000095feffff05af92b9eb5c603cc82a49c57aa335777c3c8ac86bcf170b2883a1baa20f2308646932897b9c328a5bd62a2feafe4b76fbdeefae56cf6108d5c6975ef0cd4ab9881202e042c510730aec676e6fb88767e9dc3f45c0900cd54f7f53f59f2289c93d76f0df997735c9d5de82cbd888f998a191e16c2d2bdca06f3b134eb6fd9e9d735899d102616a4685"]) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000240)={0x3, 0x1}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r8 = epoll_create1(0x80000) syz_usb_connect(0x5, 0x2d, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4, @ANYBLOB="59afc3a7b50114fdc043e599178dcc91cf246be81da5751ab62e912c2a4b9549ca5ab3152828f0ffb668ce36175b0b17efdcd7d7a01f125193298247d672b63f4ea07f81dc3001493f13189a22b5bd1171e871b0b7734eacf963c8c79612d2db5a456a4d928fa8eca8614af03e574e654d6b87ec21e1b555fd1862290598239d42b100a21118abfc294307a4b13282d6efe4cb367e945ee82db234109c52417abfdd6e8773fa41", @ANYRESDEC=r8, @ANYRESOCT=r6, @ANYRESDEC=r0, @ANYRES32=r8, @ANYRES64=r0, @ANYRESDEC=r2, @ANYRES32, @ANYBLOB="80b6501e9da6915e563943f488ef45e5b0e9753937e4be7ae2dedf6fc1493a56a2ae9f6427d581feefe44c614400fde2c79c68da0a7a045f6015e43c90f0f66a7d20f685bf9641ab4e99d2907980b17304f4fcd29f95a7bba16ac81ac9d64d1e58b5a112677072d8dcc211d6cbb1b02ac1aa0614aef7c0a66f2a1207ad620dfc328a2e1fbf7c0b585eb0e0145e"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r7, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000000)={0x20000000}) (async) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r11, &(0x7f0000000040)={0x40000006}) 2m53.357287805s ago: executing program 9 (id=1700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0xe5, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0x7fffebfd) 2m50.315939327s ago: executing program 9 (id=1706): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) poll(&(0x7f0000000480)=[{r1, 0x4}, {0xffffffffffffffff, 0x40c6}, {r0, 0x11040}, {r1, 0x200}, {r1, 0x4}], 0x5, 0x800) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000fa0482aebb82ec7fa175a7f7f9096bf5e782da30e0c418e2971dbd1073b4877529a977f5fea5f7910a681dceed977c15444517e51c4ea84867fa18bd1a57df8bd22960d3da0edf604e98122c06951fbfb3a232b06de38d6877061e9d685437833f88ca6cdfbb84614795c2f3fa6ea96320aa29f5a8a127209197f5462d", @ANYRES16=r2, @ANYBLOB="010026bda7c30b5fa133477000fddbdf25050000000c00018008000100", @ANYRES32=r3, @ANYBLOB="14eb9600000000040800"/20], 0x34}}, 0x2c008034) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000fa0482aebb82ec7fa175a7f7f9096bf5e782da30e0c418e2971dbd1073b4877529a977f5fea5f7910a681dceed977c15444517e51c4ea84867fa18bd1a57df8bd22960d3da0edf604e98122c06951fbfb3a232b06de38d6877061e9d685437833f88ca6cdfbb84614795c2f3fa6ea96320aa29f5a8a127209197f5462d", @ANYRES16=r2, @ANYBLOB="010026bda7c30b5fa133477000fddbdf25050000000c00018008000100", @ANYRES32=r3, @ANYBLOB="14eb9600000000040800"/20], 0x34}}, 0x2c008034) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010000defaff0000000000040000000000000008", @ANYRES32=0x0, @ANYBLOB="10000000000000002000040000000000"], 0x2c, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010000defaff0000000000040000000000000008", @ANYRES32=0x0, @ANYBLOB="10000000000000002000040000000000"], 0x2c, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x3210c1, 0x9c37611dc13d0d81) fchown(r4, 0xffffffffffffffff, 0x0) (async) fchown(r4, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000002c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0xfffffffffffffe39, 0x118, 0x22}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x0, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2042, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000100)={0x1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, &(0x7f0000000140)=@keyring) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, &(0x7f0000000140)=@keyring) mknodat(r0, &(0x7f0000000340)='./file2\x00', 0x200, 0x2) (async) mknodat(r0, &(0x7f0000000340)='./file2\x00', 0x200, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) connect$phonet_pipe(r0, &(0x7f0000000500)={0x23, 0x4, 0x5, 0x9}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='qnx4\x00', 0x10, 0x0) (async) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='qnx4\x00', 0x10, 0x0) open$dir(&(0x7f0000000440)='.\x00', 0x2200, 0x48) unlinkat(r10, &(0x7f0000000640)='./file1\x00', 0x200) 2m49.966794897s ago: executing program 9 (id=1708): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x47524247}}) sendfile(r0, r0, 0x0, 0x7ffff000) 2m34.892947275s ago: executing program 38 (id=1708): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x47524247}}) sendfile(r0, r0, 0x0, 0x7ffff000) 3.997666432s ago: executing program 0 (id=2992): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) (async) setreuid(0x0, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0x12, 0x5}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000040)={0x9, 0x5, 0x128c, 0x1, 'syz0\x00', 0x1}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000040)={0x9, 0x5, 0x128c, 0x1, 'syz0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f0000000040)={0x2, 0x5}) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(r4, 0xc008af7b, &(0x7f0000000040)={0x2, 0x5}) mount$nfs4(&(0x7f0000000100)='syz0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1, &(0x7f0000000240)={[{}, {'\xc1\x1e\xde\x1c)'}, {'/dev/vhost-net\x00'}], [{@audit}, {@hash}, {@subj_type={'subj_type', 0x3d, '/dev/snd/controlC#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vhost-net\x00'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@uid_lt={'uid<', r2}}]}) (async) mount$nfs4(&(0x7f0000000100)='syz0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1, &(0x7f0000000240)={[{}, {'\xc1\x1e\xde\x1c)'}, {'/dev/vhost-net\x00'}], [{@audit}, {@hash}, {@subj_type={'subj_type', 0x3d, '/dev/snd/controlC#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vhost-net\x00'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@uid_lt={'uid<', r2}}]}) 3.906873102s ago: executing program 0 (id=2993): r0 = syz_io_uring_complete(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) madvise(&(0x7f0000976000/0x3000)=nil, 0x3000, 0xe) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f000042e000/0x4000)=nil}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 64) 3.281200544s ago: executing program 7 (id=2999): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec80000ec00120c000140060404000a0404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x62, 0xe1, 0xba, 0x10, 0x10b9, 0x8000, 0xc0fa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc8, 0x58, 0x7e}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r1, 0xa4717000) madvise(&(0x7f000054e000/0x4000)=nil, 0x4000, 0x3) 3.25572031s ago: executing program 0 (id=3002): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 3.09777887s ago: executing program 0 (id=3004): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340)={[], 0xfffffffffffffff8}, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141342, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000100)=@ll={0x11, 0x9, r5, 0x1, 0xb, 0x6, @multicast}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000080)="2705670f28665a6dfcfc002f86dd", 0xe}, {&(0x7f0000000480)="74d5406b88ac53c2d7877b9715552f06a33c94f042ddf77d792da9809660fa7ee1d169f8d9c2dc00", 0x28}], 0x2}, 0x4000141) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r6, r2, 0x0, 0x7fffefff) sendfile(r2, r2, 0x0, 0x7ffff000) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) close(r1) (async) close(0xffffffffffffffff) (async) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340)={[], 0xfffffffffffffff8}, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141342, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) (async) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000100)=@ll={0x11, 0x9, r5, 0x1, 0xb, 0x6, @multicast}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000080)="2705670f28665a6dfcfc002f86dd", 0xe}, {&(0x7f0000000480)="74d5406b88ac53c2d7877b9715552f06a33c94f042ddf77d792da9809660fa7ee1d169f8d9c2dc00", 0x28}], 0x2}, 0x4000141) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) (async) sendfile(r6, r2, 0x0, 0x7fffefff) (async) sendfile(r2, r2, 0x0, 0x7ffff000) (async) 2.806785527s ago: executing program 0 (id=3006): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xd83b9000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pidfd_getfd(0xffffffffffffffff, r0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) landlock_restrict_self(0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.396199818s ago: executing program 0 (id=3009): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x0, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000280)={0x101, 0x4, 0xb66, 0x8, 0x8}) sendto$inet6(r1, &(0x7f00000002c0)="b6e214b05bf75e2283f139cfa1db0d72512b8225c6b7e2c09a64e01a56092794", 0x20, 0x20040805, &(0x7f0000000300)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x532}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0xa, 0x5, 0x401) r5 = landlock_create_ruleset(&(0x7f0000000340)={0xa12, 0x3, 0x3}, 0x18, 0x2) copy_file_range(r5, &(0x7f0000000380)=0xfffffffffffffff7, r0, &(0x7f00000003c0)=0x3, 0x58, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0x0, 0x40, 0xf0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "070c51330aac"}, {0x5, 0x24, 0x0, 0xb2aa}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x1, 0x400}, {0x6, 0x24, 0x1a, 0x244, 0x29}, [@mbim={0xc, 0x24, 0x1b, 0x72, 0xd, 0x3, 0xf9, 0x7, 0xaf}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x5, 0xf}, @country_functional={0xa, 0x24, 0x7, 0x8, 0x1, [0xe3, 0x1]}, @acm={0x4, 0x24, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0xfff}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x6, 0x35}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0xa, 0xbe}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7f, 0xb9, 0xf}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x5, 0x7d, 0x3d, 0x20, 0x6}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x200, 0xf000, 0x2, [0x0]}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x2, 0xff1e, 0x2, [0xf, 0xff3f3f, 0x3f17, 0xff3ff0, 0x3f00, 0x2080]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x4, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x4, 0xff00, 0x4}]}, 0x8, [{0xd2, &(0x7f0000000580)=@string={0xd2, 0x3, "3deea16f539c0ca4b115e69a0386c1668379b17194f5dea81655708f1a771763cee1da53306885e7fb51972b763dec4df5e24fc68f399cf74becc76f93a4cf8dfaa6ac15ab9384f1943b9bde8d927510a1e2614ad8dd1561b505ad91d9231beb697d19a7c3a9de03d9bc84a143e19ed5e9062152a436d71c5164cf46e4344c8930d465b7df101835865be2fa09445cd0faf693f09bf217a6f70c379562651fea949c27d30e22f06d05331fc126f654c749815e14cf4b297120f96f52ab7d396ee8c5220af9af36dcb8af18b5cf91e93d"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2811}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x401}}, {0xe7, &(0x7f0000000700)=@string={0xe7, 0x3, "e4898be66fef4f2d9ad4673455eb8d732a1163d1650b91b5b5267add184575a15c5d91d9ff6550a29822b98232b7492166f0209460d5175a0536ecbdd2ea22bf20e5e135856045dfbeacd5586cd564481ce90702d89efbc89c22d73a9ab987dd656018bf15da458bbcb909bd93f95575704a4bde70b9e31795eabb6085f07b6e5b58da99bf28dfeed2edf6bfc34c89bb1a81d2340b97fd35e1c9c3ee2412abda3a385d7126fc963710ff6aaac69774bee8ca8e001911c12aba7ee3a9c637fa31a8d625ec12a67439fc49c62749637884a28b131a27e4f12992df46e43f04dab908e87afe59"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x410}}, {0xf6, &(0x7f0000000840)=@string={0xf6, 0x3, "3c84a4ad886285b9d4da0948d57c8b6e25c2a952ce78fa814f2bba07f6f18115ee37df18f09d8dc7199375d3b2767472460fce098d50149d7602602b4fc1d5785c75b6076d6551852199ac2a455e71ec3235f861793bef53053e18b3f30d39c16abb72821cdcfab4c895981b16bd77b06555e7f9c19ca8c29f7ae3b82fa7c342da6b94f6bb53c8e7fa0f551561440e3b0f73d00d45f43395882ae09a099c45ecfd75cff1fd8d09ba4202567ba6be9e21e691bebf82017a4cfb70035fe56ffe724acddc2cff21a3434dbc93ee9c5bd20f9d755d0410bbf42375925bf90a7b3ca8c281f941d87b248ee0c0f2a52b2320fd25e56cb2"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x2009}}]}) getsockname$packet(r4, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a80)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x1b, r6, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x110041, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x81ee3187f17ff79f, 0x0) ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f0000000b80)={0x1, 0x1}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), &(0x7f0000000c80), 0x2, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x58, 0x3, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x845}, 0x200400c4) syz_usb_connect$cdc_ncm(0x0, 0xab, &(0x7f0000000e00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x2, 0x1, 0x2, 0x10, 0x6f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "c3"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x8011, 0x3}, {0x6, 0x24, 0x1a, 0xf06, 0x34}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x8, 0x2, 0x1, 0x9, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0xa1, 0xe, 0xa}, @country_functional={0x8, 0x24, 0x7, 0x6, 0x6, [0x4]}, @network_terminal={0x7, 0x24, 0xa, 0xfa, 0x4, 0x7c, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xd}]}, {{0x9, 0x5, 0x81, 0x3, 0x208, 0x5, 0x9, 0xde}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xb, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0xf, 0x7b}}}}}}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x250, 0x8, 0x0, 0x9, 0xff, 0x1}, 0x92, &(0x7f0000000f00)={0x5, 0xf, 0x92, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x2, 0xff, 0x4, 0x6e}, @generic={0x82, 0x10, 0xa, "5dc1b1bb2eeba5ac999c1e6702e2dfe8e140ceaf0bc88c63e905777066e15e280a9dee4bc5c265f33bd257125be3eb10d27d7a21eafe9d9c67b42242bc7115d4dc2037817a152826845eedcc9deb0f0c089c484fd360da693f984a2bb351973712e14dae2ec14bd19cf6b73ac6d8e45b7a9a8c03d6bbd82bb953e6bf93346a"}]}, 0x2, [{0x25, &(0x7f0000000fc0)=@string={0x25, 0x3, "dc38bbc326d3323ce3806628ec3b16b16a7c36383eeca884642883e84f8a7f8ffb4f93"}}, {0xa8, &(0x7f0000001000)=@string={0xa8, 0x3, "31355c01da3785d16b5910bd5ad8f7102a54d19c9f5129da9744c7b824e15ab43bd8c55494a3307b4be1b45fd4141943daa815e87db978f793f318feb190a112c65e65df2190b1e4b4375476c3fc4b708f6f5499d471aaf92d935ecd4cd3041f8abb555013b4669b696a9cc711e70badcfbf1f0e1b717b1bafabe9c12cc995320f49184bc33cbc1a715a9f391de497c06f7a782965d6631f1b98c611a124d4dfcedc3159742f"}}]}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/kexec_loaded', 0x109200, 0x0) fcntl$getownex(r9, 0x10, &(0x7f0000001140)) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x0, 0xa2, 0x10}, 0x18) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000001180)='\x00', &(0x7f00000011c0)='./file0\x00', r10) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x4000)=nil) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000001500)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000014c0)={&(0x7f00000012c0)={0x1c4, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6016347cc2221dc7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040001) ioctl$BLKOPENZONE(r9, 0x40101286, &(0x7f0000001540)={0x81, 0x6}) bind$l2tp6(0xffffffffffffffff, &(0x7f00000015c0)={0xa, 0x0, 0x9, @empty, 0x9bd, 0x2}, 0x20) 2.395712758s ago: executing program 6 (id=3010): mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 2.289127914s ago: executing program 6 (id=3012): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x34, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2c39000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000000c0)=0x8, 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) (async) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x34, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x840) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2c39000) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000000c0)=0x8, 0x4) (async) 2.214284429s ago: executing program 4 (id=3014): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x6, 0x7, 0x3, 0x8, 0x10, "722a609d5b8e6760"}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) flock(r0, 0x5) flock(r0, 0x1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xf648d000) ioprio_set$uid(0x3, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x0, r3, 0x0, 0x0, 0x3}]) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) 2.074152537s ago: executing program 4 (id=3015): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0) 1.985356572s ago: executing program 4 (id=3016): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="200e000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 1.878246553s ago: executing program 6 (id=3017): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) (async) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) socket(0x15, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed8, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0xffffff4a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x80000005, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x20000000, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x9, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0x6b1, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) creat(&(0x7f0000000080)='./file0\x00', 0xac) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 1.831580327s ago: executing program 6 (id=3018): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000000)=0x3) 908.016081ms ago: executing program 6 (id=3019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={[0x6]}, &(0x7f0000000040), &(0x7f0000000100)={r0, r1+60000000}, 0x8) ioprio_set$pid(0x1, 0x0, 0x4000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) open(&(0x7f0000000180)='./file0\x00', 0x4a481, 0x4) (async) open(&(0x7f0000000180)='./file0\x00', 0x4a481, 0x4) sendfile(r2, r2, 0x0, 0x7ffff000) 401.677397ms ago: executing program 4 (id=3020): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="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", 0x106}], 0x1) 368.765162ms ago: executing program 4 (id=3021): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) r3 = socket(0x840000000002, 0x3, 0xff) shutdown(r3, 0x1) sendmmsg$inet(r3, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}], 0x1, 0x20004086) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r4, 0x7dfff000) 225.065005ms ago: executing program 7 (id=3022): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = gettid() setpgid(r1, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000120fec0000000000000080005007a010401a8001600200003400400ff00035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000300)='./file1/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000000180)={0x0, 0x0, 0xfffffffb}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x7, 0x1, 0x0, 0x80, r3}) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000200)) mount$overlay(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000080), 0x20d80b1, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048090) setresuid(r4, r4, 0x0) r6 = fspick(0xffffffffffffff9c, 0x0, 0x1) rmdir(&(0x7f0000000240)='./file1\x00') ioprio_get$pid(0x1, r1) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) mkdir(&(0x7f0000000500)='./file3aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) 191.399194ms ago: executing program 7 (id=3023): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 130.803566ms ago: executing program 7 (id=3024): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) write(r0, &(0x7f0000000400)="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", 0x1f000) 45.137304ms ago: executing program 7 (id=3025): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x1, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$clear(0x5, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1000) 44.851628ms ago: executing program 4 (id=3026): prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x90}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) setrlimit(0xa, &(0x7f0000000040)={0x7fffffff, 0x9f09}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000540)={0x2, {0x3}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = fcntl$getown(r0, 0x9) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) 37.295565ms ago: executing program 6 (id=3027): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000480)={0xbf3d85e, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 0s ago: executing program 7 (id=3028): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x20, 0x22, 0x6d, {0x6d, 0x23, "176962868eb160a85903e5c6e941b880d824d730c42773f11dda73d2b0798ff77d932c863a27ec269af6c3c08b1313629493a7421e3b2579895eede4d26cea70c8b5e1858ad403f3554982060edea899a631706e87df7a395ca9cabf89370ef882ac5ca60bef4f64f0c99e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) kernel console output (not intermixed with test programs): 418.511562][T13860] 156348 total pagecache pages [ 418.533315][T13860] 36 pages in swap cache [ 418.545917][T13860] Free swap = 123772kB [ 418.560895][T13860] Total swap = 124996kB [ 418.568474][T13860] 2097051 pages RAM [ 418.572307][T13860] 0 pages HighMem/MovableOnly [ 418.599590][T13860] 426256 pages reserved [ 418.626315][T13860] 0 pages cma reserved [ 418.684499][ T30] audit: type=1804 audit(1756692185.194:107): pid=13939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2039" name="rnullb0" dev="tmpfs" ino=1472 res=1 errno=0 [ 418.685952][T13945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.746709][T13947] /dev/rnullb0: Can't lookup blockdev [ 418.753319][T13945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.768504][T13943] 9p: Bad value for 'timeout' [ 419.798041][T13978] trusted_key: encrypted_key: keylen parameter is missing [ 419.846330][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 420.036336][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 420.047815][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.068677][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.086379][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 420.106325][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.127006][ T10] usb 1-1: config 0 descriptor?? [ 420.139083][T13983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.152854][T13983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.165521][T13983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.175960][T13983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.385028][ T30] audit: type=1804 audit(1756692186.904:108): pid=13994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2057" name="rnullb0" dev="tmpfs" ino=246 res=1 errno=0 [ 420.546591][ T10] hid-u2fzero 0003:10C4:8ACF.0015: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 420.561772][ T10] hid-u2fzero 0003:10C4:8ACF.0015: U2F Zero LED initialised [ 420.586352][ T10] hid-u2fzero 0003:10C4:8ACF.0015: U2F Zero RNG initialised [ 420.613733][T14007] Malformed UNC in devname [ 420.613733][T14007] [ 420.624007][T14007] CIFS: VFS: Malformed UNC in devname [ 420.745077][T13975] /dev/rnullb0: Can't open blockdev [ 420.751497][ T10] usb 1-1: USB disconnect, device number 12 [ 420.839874][T14022] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 420.848577][T14022] /dev/rnullb0: Can't open blockdev [ 421.558634][T14042] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 421.575930][T14042] /dev/rnullb0: Can't open blockdev [ 421.798752][T14048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.807462][T14048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.832267][T14054] ./cgroup: Can't lookup blockdev [ 421.834653][T14053] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2076'. [ 422.082239][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2080'. [ 422.448058][ T30] audit: type=1804 audit(1756692188.974:109): pid=14074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2084" name="rnullb0" dev="tmpfs" ino=1472 res=1 errno=0 [ 422.629333][T14076] MTD: Couldn't look up '/dev/rnullb0': -15 [ 422.757823][T14079] /dev/rnullb0: Can't lookup blockdev [ 423.482516][ T30] audit: type=1804 audit(1756692190.004:110): pid=14112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2094" name="rnullb0" dev="tmpfs" ino=1472 res=1 errno=0 [ 423.824020][ T30] audit: type=1804 audit(1756692190.344:111): pid=14122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2097" name="rnullb0" dev="tmpfs" ino=1472 res=1 errno=0 [ 424.095164][ T30] audit: type=1804 audit(1756692190.604:112): pid=14131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2099" name="rnullb0" dev="tmpfs" ino=1472 res=1 errno=0 [ 424.232753][T14140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.250730][T14140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.592136][T14025] xt_l2tp: unknown flags: 51 [ 424.940390][ T30] audit: type=1800 audit(1756692191.464:113): pid=14173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2109" name="rnullb0" dev="tmpfs" ino=246 res=0 errno=0 [ 425.175741][T14188] /dev/rnullb0: Can't lookup blockdev [ 425.465774][ T30] audit: type=1804 audit(1756692191.984:114): pid=14208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2114" name="rnullb0" dev="tmpfs" ino=1472 res=1 errno=0 [ 425.765959][T14224] /dev/rnullb0: Can't open blockdev [ 425.832652][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2118'. [ 428.896002][T14231] /dev/rnullb0: Can't lookup blockdev [ 430.073630][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2124'. [ 430.084978][T14241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.101509][ T30] audit: type=1804 audit(1756692452.622:115): pid=14246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2126" name="rnullb0" dev="tmpfs" ino=246 res=1 errno=0 [ 430.122006][T14241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.132999][T14246] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.2126'. [ 430.606465][ T6989] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 430.756403][ T6989] usb 1-1: Using ep0 maxpacket: 16 [ 430.765062][ T6989] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 430.769853][T14261] netlink: 'syz.7.2132': attribute type 39 has an invalid length. [ 430.774851][ T6989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.791133][ T6989] usb 1-1: Product: syz [ 430.795352][ T6989] usb 1-1: Manufacturer: syz [ 430.800196][ T6989] usb 1-1: SerialNumber: syz [ 430.808794][ T6989] r8152-cfgselector 1-1: Unknown version 0x0000 [ 430.815064][ T6989] r8152-cfgselector 1-1: config 0 descriptor?? [ 431.237635][T14257] syzkaller1: entered promiscuous mode [ 431.241256][T14264] /dev/rnullb0: Can't lookup blockdev [ 431.243265][T14257] syzkaller1: entered allmulticast mode [ 431.388423][ T5910] r8152-cfgselector 1-1: USB disconnect, device number 13 [ 431.437783][T14281] IPVS: length: 228 != 8 [ 431.490303][T14286] /dev/rnullb0: Can't lookup blockdev [ 431.522480][T14288] MTD: Couldn't look up '/dev/rnullb0': -15 [ 431.577929][T14292] /dev/rnullb0: Can't lookup blockdev [ 431.610868][ T30] audit: type=1804 audit(1756692454.132:116): pid=14294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2143" name="rnullb0" dev="tmpfs" ino=246 res=1 errno=0 [ 431.617844][T14294] fuse: blksize only supported for fuseblk [ 431.926629][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 433.335106][T14356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.348663][T14356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.428406][ T30] audit: type=1804 audit(1756692455.942:117): pid=14363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2155" name="rnullb0" dev="tmpfs" ino=246 res=1 errno=0 [ 433.552117][T14369] MTD: Couldn't look up '/dev/rnullb0': -15 [ 433.678312][T14374] /dev/rnullb0: Can't lookup blockdev [ 433.736216][T14377] sctp: [Deprecated]: syz.4.2160 (pid 14377) Use of int in max_burst socket option. [ 433.736216][T14377] Use struct sctp_assoc_value instead [ 433.761221][T14377] /dev/rnullb0: Can't lookup blockdev [ 433.869401][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2162'. [ 433.879356][T14381] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 433.886434][T14381] /dev/rnullb0: Can't open blockdev [ 434.069850][T14379] /dev/rnullb0: Can't lookup blockdev [ 434.395489][ T30] audit: type=1804 audit(1756692456.912:118): pid=14394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2166" name="rnullb0" dev="tmpfs" ino=1472 res=1 errno=0 [ 434.642667][T14408] /dev/rnullb0: Can't open blockdev [ 435.000124][T14429] tmpfs: Bad value for 'mpol' [ 435.000150][T14434] tmpfs: Bad value for 'mpol' [ 435.012506][T14437] /dev/rnullb0: Can't open blockdev [ 435.053367][T14439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.068638][T14439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.193872][T14447] netlink: 'syz.4.2182': attribute type 1 has an invalid length. [ 435.396937][ T30] audit: type=1804 audit(1756692457.922:119): pid=14463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2187" name="rnullb0" dev="tmpfs" ino=246 res=1 errno=0 [ 435.600318][T14474] rdma_rxe: rxe_newlink: failed to add wlan1 [ 435.617057][T14463] MTD: Couldn't look up '/dev/rnullb0': -15 [ 435.725906][T14485] syz.4.2195 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 435.761406][T14482] /dev/rnullb0: Can't open blockdev [ 435.790285][T14487] /dev/rnullb0: Can't lookup blockdev [ 435.799984][T14489] gfs2: gfs2 mount does not exist [ 435.974262][T14496] fuse: Unknown parameter 'rxrpc' [ 436.128201][T14501] /dev/rnullb0: Can't open blockdev [ 436.365628][T14511] netlink: 'syz.6.2203': attribute type 1 has an invalid length. [ 436.378442][T14511] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2203'. [ 436.410437][T14511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.422041][T14511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.457791][ T30] audit: type=1804 audit(1756692458.982:120): pid=14517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2205" name="rnullb0" dev="tmpfs" ino=1472 res=1 errno=0 [ 436.617332][ T30] audit: type=1326 audit(1756692459.142:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14528 comm="syz.4.2211" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc11b58ebe9 code=0x0 [ 436.639063][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.686776][ T30] audit: type=1326 audit(1756692459.212:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.0.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce98ebe9 code=0x7fc00000 [ 436.715234][T14534] /dev/rnullb0: Can't lookup blockdev [ 436.783836][T14536] wlan1 speed is unknown, defaulting to 1000 [ 436.814755][T14542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2215'. [ 436.830242][T14542] TCP: TCP_TX_DELAY enabled [ 436.885243][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2216'. [ 437.005680][T14549] netlink: 14560 bytes leftover after parsing attributes in process `syz.6.2217'. [ 437.092610][T14553] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2217'. [ 437.102888][T14553] /dev/rnullb0: Can't open blockdev [ 437.111561][ T30] audit: type=1804 audit(1756692459.632:123): pid=14552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2218" name="rnullb0" dev="tmpfs" ino=246 res=1 errno=0 [ 437.134694][T14552] MTD: Couldn't look up '/dev/rnullb0': -15 [ 438.037274][T14582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.056211][T14582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.144083][T14591] MTD: Couldn't look up '/dev/rnullb0': -15 [ 438.159697][T14593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.192256][T14593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.232048][T14600] MTD: Couldn't look up '/dev/rnullb0': -15 [ 438.252770][T14602] netlink: 'syz.7.2233': attribute type 10 has an invalid length. [ 438.257020][ T30] audit: type=1804 audit(1756692460.772:124): pid=14602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2233" name="rnullb0" dev="tmpfs" ino=1472 res=1 errno=0 [ 438.281556][T14602] MTD: Couldn't look up '/dev/rnullb0': -15 [ 438.340622][T14604] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 438.351825][T14604] /dev/rnullb0: Can't open blockdev [ 438.628382][T14613] netlink: 'syz.4.2238': attribute type 29 has an invalid length. [ 438.657242][T14613] netlink: 'syz.4.2238': attribute type 29 has an invalid length. [ 438.690988][T14613] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2238'. [ 439.297173][T14635] /dev/rnullb0: Can't lookup blockdev [ 439.374288][ T30] audit: type=1804 audit(1756692461.892:125): pid=14639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2248" name="rnullb0" dev="tmpfs" ino=246 res=1 errno=0 [ 439.708278][T14650] syzkaller1: entered promiscuous mode [ 439.713938][T14650] syzkaller1: entered allmulticast mode [ 439.723236][T14650] /dev/rnullb0: Can't open blockdev [ 439.785101][T14653] overlayfs: failed to clone upperpath [ 439.791315][T14652] overlayfs: failed to clone upperpath [ 440.025765][T14670] netlink: 'syz.6.2258': attribute type 1 has an invalid length. [ 440.039979][T14672] /dev/rnullb0: Can't lookup blockdev [ 440.096803][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.103246][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.309791][T14688] /dev/rnullb0: Can't lookup blockdev [ 440.321238][T14688] /dev/rnullb0: Can't lookup blockdev [ 440.490796][T14704] /dev/rnullb0: Can't lookup blockdev [ 440.824582][T14722] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 440.841642][T14722] PKCS7: Only support pkcs7_signedData type [ 440.963602][ T30] audit: type=1804 audit(1756692463.472:126): pid=14730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2277" name="rnullb0" dev="tmpfs" ino=246 res=1 errno=0 [ 441.136959][T14742] rdma_rxe: rxe_newlink: failed to add wlan1 [ 441.148449][T14742] /dev/rnullb0: Can't open blockdev [ 441.194409][T14745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.224314][T14745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.820919][T14757] /dev/rnullb0: Can't lookup blockdev [ 442.468503][ T5924] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 442.507726][ T5924] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 442.594710][T14776] fido_id[14776]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 442.614927][T14782] /dev/rnullb0: Can't lookup blockdev [ 442.621370][T14779] /dev/rnullb0: Can't lookup blockdev [ 442.708018][T14785] /dev/rnullb0: Can't open blockdev [ 443.279610][ T30] audit: type=1804 audit(1756692465.802:127): pid=14804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2301" name="rnullb0" dev="tmpfs" ino=246 res=1 errno=0 [ 443.492653][T14811] veth1_to_bond: entered allmulticast mode [ 443.519934][T14811] veth1_to_bond: left allmulticast mode [ 443.528976][ T30] audit: type=1804 audit(1756692466.052:128): pid=14811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2304" name="rnullb0" dev="tmpfs" ino=1472 res=1 errno=0 [ 443.864901][T14827] [U]  [ 443.867711][T14827] [U] K{ [ 443.886354][T14827] [U] t 1ŠFfˊ`GJgo/mC [ 443.893365][T14827] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 443.935653][T14827] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 443.996453][T14827] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 444.177186][T14827] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 444.225321][T14827] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 444.283305][T14856] /dev/rnullb0: Can't open blockdev [ 444.285423][T14827] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 444.343667][T14863] /dev/rnullb0: Can't lookup blockdev [ 444.350805][T14863] /dev/rnullb0: Can't lookup blockdev [ 444.360649][T14827] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 444.525653][T14827] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 444.594356][T14827] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 444.622417][T14827] [U] 22Ʃx?0;3u [ 444.626884][T14827] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 444.654841][T14827] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 444.664378][T14827] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 444.694289][T14827] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 444.707129][T14827] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 444.732128][T14827] [U] ec [ 444.735313][T14827] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 444.749070][T14827] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 444.902592][T14898] batadv_slave_0: entered promiscuous mode [ 444.924851][T14898] batadv_slave_0: left promiscuous mode [ 444.996152][T14905] /dev/rnullb0: Can't lookup blockdev [ 445.053749][T14911] /dev/rnullb0: Can't lookup blockdev [ 445.685167][T14932] 9p: Bad value for 'wfdno' [ 445.705777][T14933] /dev/rnullb0: Can't lookup blockdev [ 445.740611][T14936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.762062][T14936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.091388][T14946] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 446.097944][T14946] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 446.139331][T14949] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 446.145879][T14949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 446.178285][T14949] vhci_hcd vhci_hcd.0: Device attached [ 446.184900][T14946] vhci_hcd vhci_hcd.0: Device attached [ 446.204834][T14952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.256698][T14952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.356562][ T5910] vhci_hcd: vhci_device speed not set [ 446.426317][ T5910] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 446.436385][ T6989] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 446.586345][ T6989] usb 1-1: device descriptor read/64, error -71 [ 446.826301][ T6989] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 446.956357][ T6989] usb 1-1: device descriptor read/64, error -71 [ 447.070964][ T6989] usb usb1-port1: attempt power cycle [ 447.426712][ T6989] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 447.479994][ T6989] usb 1-1: device descriptor read/8, error -71 [ 447.503918][ T30] audit: type=1804 audit(1756692470.022:129): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2350" name="rnullb0" dev="tmpfs" ino=1472 res=1 errno=0 [ 447.535092][T14972] syzkaller1: entered allmulticast mode [ 447.580876][T14974] MTD: Couldn't look up '/dev/rnullb0': -15 [ 447.588514][T14974] /dev/rnullb0: Can't lookup blockdev [ 447.681009][ T30] audit: type=1804 audit(1756692470.202:130): pid=14986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2354" name="rnullb0" dev="tmpfs" ino=1472 res=1 errno=0 [ 447.734169][T14988] overlayfs: missing 'lowerdir' [ 447.736374][ T6989] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 447.767085][ T6989] usb 1-1: device descriptor read/8, error -71 [ 447.886653][ T6989] usb usb1-port1: unable to enumerate USB device [ 447.928080][T14995] /dev/rnullb0: Can't lookup blockdev [ 449.101358][T14950] vhci_hcd: connection closed [ 449.101706][ T1151] vhci_hcd: stop threads [ 449.114110][T14947] vhci_hcd: connection reset by peer [ 449.119734][ T1151] vhci_hcd: release socket [ 449.124371][ T1151] vhci_hcd: disconnect device [ 449.150632][ T1151] vhci_hcd: stop threads [ 449.154960][ T1151] vhci_hcd: release socket [ 449.169546][ T1151] vhci_hcd: disconnect device [ 449.450659][T15000] tmpfs: Unknown parameter 'qrota' [ 449.467539][T15000] /dev/rnullb0: Can't lookup blockdev [ 449.575615][T15030] /dev/rnullb0: Can't lookup blockdev [ 450.345478][T15064] tc_dump_action: action bad kind [ 450.371176][T15064] netlink: 'syz.6.2379': attribute type 30 has an invalid length. [ 451.253567][ T30] audit: type=1804 audit(1756692473.772:131): pid=15091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2387" name="rnullb0" dev="tmpfs" ino=1472 res=1 errno=0 [ 451.290005][T15094] /dev/rnullb0: Can't lookup blockdev [ 451.460688][T15109] /dev/nullb0: Can't lookup blockdev [ 451.527803][ T5894] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 451.597839][ T5910] vhci_hcd: vhci_device speed not set [ 451.621265][T15124] netlink: 'syz.4.2396': attribute type 11 has an invalid length. [ 451.663241][T15127] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2395'. [ 451.698057][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 451.706837][ T5894] usb 1-1: not running at top speed; connect to a high speed hub [ 451.709808][T15122] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2395'. [ 451.725343][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.732767][T15127] /dev/rnullb0: Can't lookup blockdev [ 451.751401][ T5894] usb 1-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=af.16 [ 451.764878][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.778514][ T5894] usb 1-1: Product: syz [ 451.782715][ T5894] usb 1-1: Manufacturer: syz [ 451.788691][ T5894] usb 1-1: SerialNumber: syz [ 452.009816][ T5894] pwc: Visionite VCS-UC300 USB webcam detected. [ 452.017048][ T5894] pwc: Failed to set LED on/off time (-71) [ 452.023143][ T5894] pwc: send_video_command error -71 [ 452.028398][ T5894] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 452.035964][ T5894] Philips webcam 1-1:1.0: probe with driver Philips webcam failed with error -71 [ 452.047650][ T5894] usb 1-1: USB disconnect, device number 18 [ 452.404617][T15148] MTD: Couldn't look up '/dev/rnullb0': -15 [ 452.406550][T15150] /dev/rnullb0: Can't lookup blockdev [ 452.832428][ T30] audit: type=1326 audit(1756692475.352:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15171 comm="syz.0.2414" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06ce98ebe9 code=0x0 [ 453.214323][T15187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.227650][T15187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.563517][T15201] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 453.570930][T15201] /dev/rnullb0: Can't open blockdev [ 453.729248][ T30] audit: type=1804 audit(1756692476.252:133): pid=15205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2425" name="rnullb0" dev="tmpfs" ino=1472 res=1 errno=0 [ 453.926459][ T10] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 454.097701][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 454.105149][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 454.115470][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 454.125578][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 454.137003][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 454.157226][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 454.164682][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 454.175069][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 454.185006][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 454.196967][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 454.207995][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 454.215427][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 454.226595][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 454.237230][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 454.249769][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 454.268498][ T10] usb 1-1: string descriptor 0 read error: -22 [ 454.274791][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 454.296298][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.320258][ T10] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 454.410374][ T30] audit: type=1326 audit(1756692476.932:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15202 comm="syz.7.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bb38ebe9 code=0x7fc00000 [ 454.625906][T15219] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.907715][T15223] /dev/rnullb0: Can't lookup blockdev [ 454.984954][T15228] block nbd6: Attempted send on invalid socket [ 455.012630][T15228] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 455.061841][T15228] /dev/rnullb0: Can't open blockdev [ 455.174831][T15246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.199391][T15246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.224530][T15255] netlink: 'syz.7.2442': attribute type 29 has an invalid length. [ 455.301589][T15257] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2443'. [ 455.330288][T15257] /dev/rnullb0: Can't lookup blockdev [ 455.483495][ T30] audit: type=1804 audit(1756692478.002:135): pid=15270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2448" name="rnullb0" dev="tmpfs" ino=1472 res=1 errno=0 [ 456.526018][ T30] audit: type=1326 audit(1756692479.042:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.4.2457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc11b58ebe9 code=0x0 [ 456.615402][ T5894] usb 1-1: USB disconnect, device number 19 [ 456.616635][ T30] audit: type=1804 audit(1756692479.122:137): pid=15295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2457" name="rnullb0" dev="tmpfs" ino=246 res=1 errno=0 [ 456.761310][T15297] svc: failed to register nfsdv3 RPC service (errno 111). [ 456.778163][T15297] svc: failed to register nfsaclv3 RPC service (errno 111). [ 456.808689][ T5185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 456.816052][ T5185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 456.824075][ T5185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 456.832079][ T5185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 456.839697][ T5185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 456.870705][T15302] wlan1 speed is unknown, defaulting to 1000 [ 457.009253][T15306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.042281][T15306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.095272][T15310] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 457.113933][T15310] /dev/rnullb0: Can't open blockdev [ 457.130025][ T6050] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.213035][ T6050] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.275993][ T6050] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.305624][T15302] chnl_net:caif_netlink_parms(): no params data found [ 457.392916][ T6050] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.409524][ T30] audit: type=1326 audit(1756692479.912:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.4.2461" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fc11b58ebe9 code=0x0 [ 457.517483][T15302] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.534939][T15302] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.550898][T15302] bridge_slave_0: entered allmulticast mode [ 457.561361][ T30] audit: type=1326 audit(1756692480.082:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15324 comm="syz.4.2463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc11b58ebe9 code=0x0 [ 457.584769][T15302] bridge_slave_0: entered promiscuous mode [ 457.596080][T15302] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.603669][T15302] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.611336][T15302] bridge_slave_1: entered allmulticast mode [ 457.618667][T15302] bridge_slave_1: entered promiscuous mode [ 457.667758][T15302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.719582][T15302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.779640][T15302] team0: Port device team_slave_0 added [ 457.789626][ T6050] bridge_slave_1: left allmulticast mode [ 457.795590][ T6050] bridge_slave_1: left promiscuous mode [ 457.802777][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.813443][ T6050] bridge_slave_0: left allmulticast mode [ 457.819386][ T6050] bridge_slave_0: left promiscuous mode [ 457.825393][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.930170][ T6050] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 457.965942][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.980722][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.991243][ T6050] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 458.011084][ T6050] bond0 (unregistering): Released all slaves [ 458.028004][T15302] team0: Port device team_slave_1 added [ 458.071098][T15302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.080229][T15302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.120154][T15302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.133805][T15302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.142178][T15302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.206462][T15302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.246902][ T6050] tipc: Left network mode [ 458.332640][T15302] hsr_slave_0: entered promiscuous mode [ 458.342748][T15302] hsr_slave_1: entered promiscuous mode [ 458.353604][T15302] debugfs: 'hsr0' already exists in 'hsr' [ 458.359566][T15302] Cannot create hsr debugfs directory [ 458.527278][T15344] /dev/rnullb0: Can't open blockdev [ 458.537367][T15341] /dev/rnullb0: Can't lookup blockdev [ 458.705985][ T6050] hsr_slave_0: left promiscuous mode [ 458.719608][ T6050] hsr_slave_1: left promiscuous mode [ 458.725551][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.736298][ T5185] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 458.744638][ T5185] Bluetooth: hci1: Injecting HCI hardware error event [ 458.751827][ T5185] Bluetooth: hci1: hardware error 0x00 [ 458.758471][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.768732][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.776187][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.806553][ T6050] veth1_macvtap: left promiscuous mode [ 458.812136][ T6050] veth0_macvtap: left promiscuous mode [ 458.818030][ T5910] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 458.831636][ T6050] veth0_vlan: left promiscuous mode [ 458.890423][ T5867] Bluetooth: hci2: command tx timeout [ 458.963050][ T6050] team0 (unregistering): Port device macvlan1 removed [ 458.986477][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 459.001994][ T5910] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 459.053345][ T5910] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 459.078805][ T5910] usb 1-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 459.096304][ T5910] usb 1-1: Product: syz [ 459.100532][ T5910] usb 1-1: Manufacturer: syz [ 459.105510][ T5910] usb 1-1: SerialNumber: syz [ 459.129996][ T5910] usb 1-1: config 0 descriptor?? [ 459.216460][ T6050] team0 (unregistering): Port device team_slave_1 removed [ 459.232556][T15360] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 459.250367][T15363] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 459.260077][T15360] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 459.276407][ T6050] team0 (unregistering): Port device team_slave_0 removed [ 459.356128][ T5910] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 459.626978][T15377] /dev/rnullb0: Can't open blockdev [ 459.858246][ T6050] IPVS: stop unused estimator thread 0... [ 459.921011][T15302] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 459.943621][T15302] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 459.967507][T15302] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 459.986216][T15302] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 460.143981][T15302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.173980][T15302] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.204938][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.212124][ T6052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.236982][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.244134][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.573641][ T5910] gspca_sunplus: reg_w_riv err -71 [ 460.580076][ T5910] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 460.610723][T15413] overlayfs: failed to clone upperpath [ 460.614892][ T5910] usb 1-1: USB disconnect, device number 20 [ 460.626996][T15302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.648464][T15413] /dev/rnullb0: Can't lookup blockdev [ 460.790865][T15422] netlink: 'syz.4.2476': attribute type 1 has an invalid length. [ 460.799194][T15422] netlink: 'syz.4.2476': attribute type 1 has an invalid length. [ 460.818268][ T5185] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 460.873151][T15427] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 460.899250][T15422] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 460.966660][ T5185] Bluetooth: hci2: command tx timeout [ 461.020066][T15431] /dev/rnullb0: Can't open blockdev [ 461.021083][T15302] veth0_vlan: entered promiscuous mode [ 461.038831][T15302] veth1_vlan: entered promiscuous mode [ 461.068698][T15302] veth0_macvtap: entered promiscuous mode [ 461.079319][T15302] veth1_macvtap: entered promiscuous mode [ 461.103763][T15302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.145804][T15302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.181892][T15443] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2480'. [ 461.195915][ T6048] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.206017][ T6048] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.230779][ T6048] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.252048][ T6048] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.296024][ T6048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.314543][ T6048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.340320][ T6052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.349665][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2480'. [ 461.361575][ T6052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.370662][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2480'. [ 461.382288][T15442] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 461.390732][T15442] /dev/rnullb0: Can't open blockdev [ 461.520684][T15459] warn_alloc: 1 callbacks suppressed [ 461.520711][T15459] syz.6.2481: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 461.620823][T15459] CPU: 0 UID: 0 PID: 15459 Comm: syz.6.2481 Not tainted syzkaller #0 PREEMPT(full) [ 461.620848][T15459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.620859][T15459] Call Trace: [ 461.620865][T15459] [ 461.620872][T15459] dump_stack_lvl+0x189/0x250 [ 461.620902][T15459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.620924][T15459] ? __pfx__printk+0x10/0x10 [ 461.620942][T15459] ? lock_release+0x4b/0x3e0 [ 461.620959][T15459] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 461.620979][T15459] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 461.620999][T15459] warn_alloc+0x214/0x310 [ 461.621018][T15459] ? __pfx_warn_alloc+0x10/0x10 [ 461.621037][T15459] ? __get_vm_area_node+0x28f/0x300 [ 461.621057][T15459] ? xskq_create+0xbf/0x170 [ 461.621076][T15459] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 461.621102][T15459] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 461.621117][T15459] ? xskq_create+0x56/0x170 [ 461.621135][T15459] ? __kasan_kmalloc+0x93/0xb0 [ 461.621157][T15459] vmalloc_user_noprof+0xad/0xf0 [ 461.621172][T15459] ? xskq_create+0xbf/0x170 [ 461.621189][T15459] xskq_create+0xbf/0x170 [ 461.621208][T15459] xsk_init_queue+0xb0/0x110 [ 461.621225][T15459] xsk_setsockopt+0x57b/0x8d0 [ 461.621242][T15459] ? __pfx_xsk_setsockopt+0x10/0x10 [ 461.621260][T15459] ? __pfx_aa_sk_perm+0x10/0x10 [ 461.621277][T15459] ? lock_release+0x4b/0x3e0 [ 461.621293][T15459] ? aa_sock_opt_perm+0xff/0x1b0 [ 461.621313][T15459] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 461.621332][T15459] ? __pfx_xsk_setsockopt+0x10/0x10 [ 461.621349][T15459] do_sock_setsockopt+0x17c/0x1b0 [ 461.621373][T15459] __x64_sys_setsockopt+0x13f/0x1b0 [ 461.621395][T15459] do_syscall_64+0xfa/0xfa0 [ 461.621416][T15459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.621432][T15459] ? clear_bhb_loop+0x60/0xb0 [ 461.621449][T15459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.621464][T15459] RIP: 0033:0x7f04a078ebe9 [ 461.621479][T15459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.621493][T15459] RSP: 002b:00007f04a15cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 461.621511][T15459] RAX: ffffffffffffffda RBX: 00007f04a09c6180 RCX: 00007f04a078ebe9 [ 461.621523][T15459] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 461.621534][T15459] RBP: 00007f04a0811e19 R08: 0000000000000004 R09: 0000000000000000 [ 461.621544][T15459] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000 [ 461.621555][T15459] R13: 00007f04a09c6218 R14: 00007f04a09c6180 R15: 00007ffe108749e8 [ 461.621573][T15459] [ 461.621579][T15459] Mem-Info: [ 461.906407][T15459] active_anon:33263 inactive_anon:18 isolated_anon:0 [ 461.906407][T15459] active_file:29549 inactive_file:58962 isolated_file:0 [ 461.906407][T15459] unevictable:20005 dirty:94 writeback:0 [ 461.906407][T15459] slab_reclaimable:13305 slab_unreclaimable:102637 [ 461.906407][T15459] mapped:33558 shmem:23476 pagetables:2609 [ 461.906407][T15459] sec_pagetables:0 bounce:0 [ 461.906407][T15459] kernel_misc_reclaimable:0 [ 461.906407][T15459] free:1176521 free_pcp:44997 free_cma:0 [ 461.986291][T15459] Node 0 active_anon:130804kB inactive_anon:72kB active_file:118152kB inactive_file:235652kB unevictable:78484kB isolated(anon):0kB isolated(file):0kB mapped:134172kB dirty:376kB writeback:20kB shmem:92368kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13780kB pagetables:10320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 462.070056][T15459] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 462.195926][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 462.203379][T15459] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 462.203419][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 462.240104][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 462.267741][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 462.276733][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 462.317187][T15459] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 462.323031][T15459] Node 0 DMA32 free:831240kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112588kB inactive_anon:72kB active_file:118152kB inactive_file:234568kB unevictable:78484kB writepending:392kB present:3129332kB managed:2555588kB mlocked:11480kB bounce:0kB free_pcp:156016kB local_pcp:100756kB free_cma:0kB [ 462.323663][T15466] wlan1 speed is unknown, defaulting to 1000 [ 462.356132][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.356529][T15459] lowmem_reserve[]: 0 0 1 1 1 [ 462.373357][T15459] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:4kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 462.403569][T15459] lowmem_reserve[]: 0 0 0 0 0 [ 462.433204][T15459] Node 1 Normal free:3873412kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:37372kB local_pcp:15592kB free_cma:0kB [ 462.464585][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.527712][T15459] lowmem_reserve[]: 0 0 0 0 0 [ 462.542726][T15459] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 462.576974][T15459] Node 0 DMA32: 4844*4kB (UME) 1616*8kB (UME) 1268*16kB (UME) 782*32kB (UME) 2081*64kB (UME) 803*128kB (UME) 210*256kB (UME) 143*512kB (UME) 37*1024kB (UME) 20*2048kB (UME) 85*4096kB (UM) = 867568kB [ 462.626389][T15459] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 462.638507][T15459] Node 1 Normal: 200*4kB (UME) 63*8kB (UME) 46*16kB (UME) 112*32kB (UME) 39*64kB (UME) 14*128kB (UME) 10*256kB (UM) 11*512kB (UM) 5*1024kB (U) 8*2048kB (UME) 936*4096kB (UM) = 3873464kB [ 462.658587][T15459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.668529][T15459] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.679287][T15459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.708568][T15459] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.766034][T15459] 125539 total pagecache pages [ 462.771584][T15459] 37 pages in swap cache [ 462.775880][T15459] Free swap = 123900kB [ 462.781359][T15459] Total swap = 124996kB [ 462.785642][T15459] 2097051 pages RAM [ 462.792072][T15459] 0 pages HighMem/MovableOnly [ 462.797140][T15459] 426256 pages reserved [ 462.801319][T15459] 0 pages cma reserved [ 462.888265][ T6048] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.923875][T15466] chnl_net:caif_netlink_parms(): no params data found [ 462.974550][ T6048] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.059819][ T5867] Bluetooth: hci2: command tx timeout [ 463.117613][ T6048] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.314606][ T6048] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.346791][T15466] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.358474][T15466] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.371267][T15466] bridge_slave_0: entered allmulticast mode [ 463.381453][T15466] bridge_slave_0: entered promiscuous mode [ 463.390730][T15466] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.401579][T15466] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.414894][T15466] bridge_slave_1: entered allmulticast mode [ 463.425729][T15466] bridge_slave_1: entered promiscuous mode [ 463.477388][T15466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.505414][T15466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.515441][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 463.570030][T15466] team0: Port device team_slave_0 added [ 463.583003][T15466] team0: Port device team_slave_1 added [ 463.591716][ T6048] bridge0: port 3(batadv0) entered disabled state [ 463.600602][ T6048] bridge_slave_1: left allmulticast mode [ 463.610071][ T6048] bridge_slave_1: left promiscuous mode [ 463.615798][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.624981][ T6048] bridge_slave_0: left allmulticast mode [ 463.632378][ T6048] bridge_slave_0: left promiscuous mode [ 463.639135][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.677833][ T10] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 463.689493][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.720717][ T10] usb 1-1: config 0 descriptor?? [ 463.734868][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 463.863574][ T6048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.879252][ T6048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.889771][ T6048] bond0 (unregistering): Released all slaves [ 463.935731][T15466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.947175][T15466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.981149][T15466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.006158][T15466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.026338][T15466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.075518][T15466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.132343][ T10] gspca_cpia1: usb_control_msg 03, error -32 [ 464.157904][ T10] cpia1 1-1:0.0: unexpected state after lo power cmd: d4 [ 464.170404][T15466] hsr_slave_0: entered promiscuous mode [ 464.187273][T15466] hsr_slave_1: entered promiscuous mode [ 464.193498][T15466] debugfs: 'hsr0' already exists in 'hsr' [ 464.207498][T15466] Cannot create hsr debugfs directory [ 464.327007][ T5867] Bluetooth: hci4: command tx timeout [ 464.364159][T15488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2488'. [ 464.391150][T15488] /dev/rnullb0: Can't open blockdev [ 464.412705][ T10] gspca_cpia1: usb_control_msg 01, error -71 [ 464.426337][ T10] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 464.478364][ T10] usb 1-1: USB disconnect, device number 21 [ 464.532536][ T6050] smc: removing ib device syz0 [ 464.558114][ T5924] wlan1 speed is unknown, defaulting to 1000 [ 464.574367][ T1210] wlan1 speed is unknown, defaulting to 1000 [ 464.582176][ T1210] syz0: Port: 1 Link DOWN [ 465.126816][ T5867] Bluetooth: hci2: command tx timeout [ 465.379656][T15466] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 465.426181][T15466] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 465.486340][T15466] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 465.514298][T15466] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 465.698738][T15534] /dev/sg0: Can't lookup blockdev [ 465.877956][T15536] Invalid ELF header magic: != ELF [ 466.201812][ T6048] hsr_slave_0: left promiscuous mode [ 466.229802][ T6048] hsr_slave_1: left promiscuous mode [ 466.247779][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.274659][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.311196][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.340158][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.377163][ T6048] veth1_macvtap: left promiscuous mode [ 466.390463][ T6048] veth0_macvtap: left promiscuous mode [ 466.406789][ T5867] Bluetooth: hci4: command tx timeout [ 466.417704][ T6048] veth1_vlan: left promiscuous mode [ 466.441304][ T6048] veth0_vlan: left promiscuous mode [ 467.069498][T15559] /dev/rnullb0: Can't open blockdev [ 467.270251][T15466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.302942][T15466] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.314358][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.321562][ T6035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.358027][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.365182][ T6035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.641276][T15466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.914604][T15466] veth0_vlan: entered promiscuous mode [ 467.943870][T15466] veth1_vlan: entered promiscuous mode [ 467.995675][T15466] veth0_macvtap: entered promiscuous mode [ 468.020707][T15466] veth1_macvtap: entered promiscuous mode [ 468.062787][T15466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.082130][T15466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.105090][ T6038] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.121217][ T6038] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.144480][ T6038] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.170131][ T6038] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.203254][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.217215][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.232381][T15585] /dev/rnullb0: Can't open blockdev [ 468.251382][ T6038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.260276][ T6038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.496568][ T5867] Bluetooth: hci4: command tx timeout [ 468.576980][ T5924] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 468.747644][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 468.758310][ T5924] usb 5-1: unable to get BOS descriptor or descriptor too short [ 468.778014][ T5924] usb 5-1: config 14 has an invalid interface number: 115 but max is 0 [ 468.796508][ T5924] usb 5-1: config 14 has no interface number 0 [ 468.809671][ T5924] usb 5-1: config 14 interface 115 has no altsetting 0 [ 468.829956][ T5924] usb 5-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 468.844913][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.867754][ T5924] usb 5-1: Product: syz [ 468.876732][ T5924] usb 5-1: Manufacturer: syz [ 468.895865][ T5924] usb 5-1: SerialNumber: syz [ 469.119114][T15589] ./file0: Can't lookup blockdev [ 469.145949][ T5924] xr_serial 5-1:14.115: More than one union descriptor, skipping ... [ 469.203475][ T5924] usb 5-1: USB disconnect, device number 46 [ 469.545602][T15609] /dev/rnullb0: Can't open blockdev [ 469.844395][T15625] /dev/rnullb0: Can't open blockdev [ 470.148270][T15634] /dev/rnullb0: Can't open blockdev [ 470.275570][T15642] /dev/rnullb0: Can't open blockdev [ 470.566574][ T5867] Bluetooth: hci4: command tx timeout [ 470.656329][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 470.830470][ T9] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 470.848365][ T9] usb 5-1: config 0 has no interface number 0 [ 470.857203][ T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 470.873137][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.894581][ T9] usb 5-1: Product: syz [ 470.904971][ T9] usb 5-1: Manufacturer: syz [ 470.915516][ T9] usb 5-1: SerialNumber: syz [ 470.941488][ T9] usb 5-1: config 0 descriptor?? [ 471.155786][T15656] /dev/rnullb0: Can't open blockdev [ 471.355218][ T9] usb 5-1: Firmware version (0.0) predates our first public release. [ 471.364975][ T9] usb 5-1: Please update to version 0.2 or newer [ 471.372642][ T9] usb 5-1: Firmware: build [ 471.580779][T15647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.590716][T15647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.745879][T15671] /dev/rnullb0: Can't open blockdev [ 472.072174][T15679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.146190][ T5924] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 472.153528][T15679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.176542][ T5924] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 472.831327][T15687] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2535'. [ 473.153130][T15695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.391900][ T9] usb 5-1: USB disconnect, device number 47 [ 473.518135][T15707] nbd: device at index 7 is going down [ 473.743776][T15695] /dev/rnullb0: Can't open blockdev [ 474.060882][T15713] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 474.071234][T15713] hfsplus: unable to find HFS+ superblock [ 474.359604][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 474.469813][T15724] binder: 15723:15724 ioctl 40046210 0 returned -14 [ 474.473013][T15722] /dev/rnullb0: Can't open blockdev [ 474.559458][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.586037][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.604019][T15730] syzkaller1: entered promiscuous mode [ 474.617532][T15730] syzkaller1: entered allmulticast mode [ 474.627405][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 474.642936][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.681867][T15730] fuse: Bad value for 'fd' [ 474.898694][ T9] usb 1-1: usb_control_msg returned -32 [ 474.904336][ T9] usbtmc 1-1:16.0: can't read capabilities [ 475.069759][T15752] /dev/rnullb0: Can't open blockdev [ 475.212782][T15755] tipc: Enabling of bearer rejected, failed to enable media [ 475.252317][T15756] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 477.130035][ T10] usb 1-1: USB disconnect, device number 22 [ 497.621859][T15783] /dev/rnullb0: Can't open blockdev [ 497.746434][ T6989] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 497.924933][ T6989] usb 1-1: not running at top speed; connect to a high speed hub [ 497.937274][ T6989] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 497.948291][ T6989] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 497.963785][ T6989] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 497.973255][ T6989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.981736][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 497.989654][ T6989] usb 1-1: Product: syz [ 497.994052][ T6989] usb 1-1: Manufacturer: syz [ 497.999769][ T6989] usb 1-1: SerialNumber: syz [ 498.007908][T15765] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 498.136334][ T24] usb 5-1: device descriptor read/64, error -71 [ 498.376572][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 498.526398][ T24] usb 5-1: device descriptor read/64, error -71 [ 498.662838][ T24] usb usb5-port1: attempt power cycle [ 498.674639][T15796] /dev/rnullb0: Can't open blockdev [ 498.739307][T15798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.764684][T15798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.781905][T15798] /dev/rnullb0: Can't open blockdev [ 499.016508][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 499.048498][ T24] usb 5-1: device descriptor read/8, error -71 [ 499.287670][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 499.328717][ T24] usb 5-1: device descriptor read/8, error -71 [ 499.355851][T15800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.371102][T15800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.393549][T15803] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 2, id = 0 [ 499.405742][T15800] /dev/rnullb0: Can't open blockdev [ 499.436731][ T24] usb usb5-port1: unable to enumerate USB device [ 500.015814][T15805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.025059][T15805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.483022][ T6989] usbhid 1-1:1.0: can't add hid device: -71 [ 500.495033][ T6989] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 500.509710][ T6989] usb 1-1: USB disconnect, device number 23 [ 500.713200][T15820] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 500.723725][T15820] /dev/rnullb0: Can't open blockdev [ 500.866486][ T6989] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 501.031607][ T6989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.091802][ T6989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.106569][ T6989] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 501.115766][ T6989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.132779][ T6989] usb 1-1: config 0 descriptor?? [ 501.465850][T15825] syzkaller1: entered promiscuous mode [ 501.473186][T15825] syzkaller1: entered allmulticast mode [ 501.487793][T15824] /dev/rnullb0: Can't open blockdev [ 501.530864][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.539768][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.563951][ T6989] sony 0003:054C:0268.0018: unknown main item tag 0x0 [ 501.574177][ T6989] sony 0003:054C:0268.0018: unknown main item tag 0x0 [ 501.582566][ T6989] sony 0003:054C:0268.0018: unknown main item tag 0x0 [ 501.597578][ T6989] sony 0003:054C:0268.0018: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.0-1/input0 [ 501.616702][ T6989] sony 0003:054C:0268.0018: failed to claim input [ 501.672562][T15829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.685987][T15829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.700283][T15829] /dev/rnullb0: Can't open blockdev [ 501.770462][T15811] netlink: 'syz.0.2571': attribute type 2 has an invalid length. [ 501.870929][ T1210] usb 1-1: USB disconnect, device number 24 [ 501.946378][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 502.076299][ T9] usb 5-1: device descriptor read/64, error -71 [ 502.316749][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 502.416093][T15841] tmpfs: Unknown parameter 'grpquota@' [ 502.422921][T15841] tmpfs: Unknown parameter 'grpquota@' [ 502.430708][T15841] tmpfs: Unknown parameter 'grpquota@' [ 502.436683][T15841] tmpfs: Unknown parameter 'grpquota@' [ 502.443322][T15841] tmpfs: Unknown parameter 'grpquota@' [ 502.450281][T15841] tmpfs: Unknown parameter 'grpquota@' [ 502.456109][T15841] tmpfs: Unknown parameter 'grpquota@' [ 502.461717][ T9] usb 5-1: device descriptor read/64, error -71 [ 502.468626][T15841] tmpfs: Unknown parameter 'grpquota@' [ 502.474453][T15841] tmpfs: Unknown parameter 'grpquota@' [ 502.481341][T15841] tmpfs: Unknown parameter 'grpquota@' [ 502.489883][T15841] tmpfs: Unknown parameter '' [ 502.510284][T15841] tmpfs: Unknown parameter '' [ 502.515413][T15841] tmpfs: Unknown parameter '' [ 502.522233][T15841] tmpfs: Unknown parameter '' [ 502.528835][T15841] tmpfs: Unknown parameter '' [ 502.533956][T15841] tmpfs: Unknown parameter '' [ 502.539932][T15841] tmpfs: Unknown parameter '' [ 502.558486][T15841] tmpfs: Unknown parameter '' [ 502.565807][T15841] tmpfs: Unknown parameter '' [ 502.572626][T15841] tmpfs: Unknown parameter '' [ 502.578004][ T9] usb usb5-port1: attempt power cycle [ 502.597237][T15841] tmpfs: Unknown parameter '' [ 502.602388][T15841] tmpfs: Unknown parameter '' [ 502.609708][T15841] tmpfs: Unknown parameter '' [ 502.614857][T15841] tmpfs: Unknown parameter '' [ 502.620394][T15841] tmpfs: Unknown parameter '' [ 502.628095][T15841] tmpfs: Unknown parameter '' [ 502.633113][T15841] tmpfs: Unknown parameter '' [ 502.639265][T15841] tmpfs: Unknown parameter '' [ 502.644497][T15841] tmpfs: Unknown parameter '' [ 502.652303][T15841] tmpfs: Unknown parameter '' [ 502.659090][T15841] tmpfs: Unknown parameter '' [ 502.664366][T15841] tmpfs: Unknown parameter '' [ 502.670682][T15841] tmpfs: Unknown parameter '' [ 502.675816][T15841] tmpfs: Unknown parameter '' [ 502.684548][T15841] tmpfs: Unknown parameter '' [ 502.690965][T15841] tmpfs: Unknown parameter '' [ 502.695975][T15841] tmpfs: Unknown parameter '' [ 502.701599][T15841] tmpfs: Unknown parameter '' [ 502.707814][T15841] tmpfs: Unknown parameter '' [ 502.712986][T15841] tmpfs: Unknown parameter '' [ 502.719011][T15841] tmpfs: Unknown parameter '' [ 502.724171][T15841] tmpfs: Unknown parameter '' [ 502.731560][T15841] tmpfs: Unknown parameter '' [ 502.737126][T15841] tmpfs: Unknown parameter '' [ 502.742143][T15841] tmpfs: Unknown parameter '' [ 502.748518][T15841] tmpfs: Unknown parameter '' [ 502.753527][T15841] tmpfs: Unknown parameter '' [ 502.760007][T15841] tmpfs: Unknown parameter '' [ 502.765039][T15841] tmpfs: Unknown parameter '' [ 502.771637][T15841] tmpfs: Unknown parameter '' [ 502.777090][T15841] tmpfs: Unknown parameter '' [ 502.782219][T15841] tmpfs: Unknown parameter '' [ 502.790251][T15841] tmpfs: Unknown parameter '' [ 502.795341][T15841] tmpfs: Unknown parameter '' [ 502.800879][T15841] tmpfs: Unknown parameter '' [ 502.805988][T15841] tmpfs: Unknown parameter '' [ 502.813813][T15841] tmpfs: Unknown parameter '' [ 502.819688][T15841] tmpfs: Unknown parameter '' [ 502.824692][T15841] tmpfs: Unknown parameter '' [ 502.832891][T15841] tmpfs: Unknown parameter '' [ 502.838410][T15841] tmpfs: Unknown parameter '' [ 502.843534][T15841] tmpfs: Unknown parameter '' [ 502.849875][T15841] tmpfs: Unknown parameter '' [ 502.855009][T15841] tmpfs: Unknown parameter '' [ 502.861013][T15841] tmpfs: Unknown parameter '' [ 502.912193][T15850] autofs: Unknown parameter '{-$pӘlc1IR [ 502.912193][T15850]  @;NsZxd|~` ysVft(gu$K.h³Rg :bjdʇ0+x 6F#tmuUŽ1RD3EFqV1'qCkW-ҝ2ޖ|'Dĉ7fm:1ύ' [ 502.947831][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 502.968723][ T9] usb 5-1: device descriptor read/8, error -71 [ 503.206291][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 503.241653][ T9] usb 5-1: device descriptor read/8, error -71 [ 503.369538][ T9] usb usb5-port1: unable to enumerate USB device [ 503.779960][T15865] /dev/rnullb0: Can't open blockdev [ 504.161823][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2586'. [ 504.192219][T15876] /dev/rnullb0: Can't open blockdev [ 504.208290][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2586'. [ 504.286768][T15860] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 504.292740][T15860] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 504.333187][T15860] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 504.340527][T15860] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 504.389081][T15860] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 504.395059][T15860] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 504.423970][T15860] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 504.429943][T15860] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 504.512818][T15880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.835623][T15894] /dev/rnullb0: Can't open blockdev [ 504.959323][T15901] 9p: Unknown parameter 'k' [ 505.837735][ T1210] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 506.008796][ T1210] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 506.040152][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.063551][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.073822][ T1210] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 506.108535][ T1210] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 506.124018][ T1210] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 506.150926][ T1210] usb 1-1: Manufacturer: syz [ 506.170800][ T1210] usb 1-1: config 0 descriptor?? [ 506.426528][ T5910] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 506.591188][ T1210] usbhid 1-1:0.0: can't add hid device: -71 [ 506.596548][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 506.610032][ T1210] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 506.614089][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.635837][ T1210] usb 1-1: USB disconnect, device number 25 [ 506.643295][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 506.676355][ T5910] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 506.718438][ T5910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 506.757179][ T5910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 506.796282][ T5910] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 506.815606][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.840424][ T5910] hub 5-1:1.0: bad descriptor, ignoring hub [ 506.856412][ T5910] hub 5-1:1.0: probe with driver hub failed with error -5 [ 506.874166][ T5910] cdc_wdm 5-1:1.0: skipping garbage [ 506.890820][ T5910] cdc_wdm 5-1:1.0: skipping garbage [ 506.907901][ T5910] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 507.474313][T15985] /dev/rnullb0: Can't open blockdev [ 507.812120][T15998] netlink: 'syz.0.2602': attribute type 4 has an invalid length. [ 508.261067][T16014] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 508.300610][T16014] overlayfs: failed to set xattr on upper [ 508.324962][T16014] overlayfs: ...falling back to redirect_dir=nofollow. [ 508.391885][T16014] overlayfs: ...falling back to index=off. [ 508.442903][T16014] overlayfs: ...falling back to uuid=null. [ 509.486965][ T6989] usb 5-1: reset high-speed USB device number 56 using dummy_hcd [ 509.658591][ T6989] usb 5-1: device firmware changed [ 509.664223][ T6989] usb 5-1: USB disconnect, device number 56 [ 509.796564][ T1210] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 509.861008][T16046] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 509.959519][ T1210] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.966435][ T6989] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 509.970515][ T1210] usb 1-1: config 0 has no interfaces? [ 509.982888][ T1210] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 509.994604][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.006867][ T1210] usb 1-1: config 0 descriptor?? [ 510.117336][T16053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.126131][T16053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.136271][ T6989] usb 5-1: Using ep0 maxpacket: 8 [ 510.142993][T16053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.143601][ T6989] usb 5-1: config 0 has an invalid interface number: 94 but max is 0 [ 510.152839][T16053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.161658][ T6989] usb 5-1: config 0 has no interface number 0 [ 510.173793][ T6989] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 510.183678][ T6989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.196984][ T6989] usb 5-1: config 0 descriptor?? [ 510.214179][ T6989] bfusb 5-1:0.94: probe with driver bfusb failed with error -5 [ 510.237643][T16058] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 510.244767][T16058] overlayfs: failed to set xattr on upper [ 510.253514][T16058] overlayfs: ...falling back to redirect_dir=nofollow. [ 510.261006][T16058] overlayfs: ...falling back to index=off. [ 510.266893][T16058] overlayfs: ...falling back to uuid=null. [ 510.574637][T16062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.585386][T16062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.677438][ T6052] Bluetooth: Error in BCSP hdr checksum [ 510.936432][ T6040] Bluetooth: Error in BCSP hdr checksum [ 511.199038][ T6038] Bluetooth: Error in BCSP hdr checksum [ 511.331544][T16071] cgroup: fork rejected by pids controller in /syz6 [ 511.458516][ T6040] Bluetooth: Error in BCSP hdr checksum [ 511.716729][ T1151] Bluetooth: Error in BCSP hdr checksum [ 511.925062][T16111] /dev/rnullb0: Can't lookup blockdev [ 511.977294][ T6048] Bluetooth: Error in BCSP hdr checksum [ 512.236457][ T6035] Bluetooth: Error in BCSP hdr checksum [ 512.486401][ T5185] Bluetooth: hci1: command 0x1003 tx timeout [ 512.486394][ T5867] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 512.500704][ T6989] usb 5-1: USB disconnect, device number 57 [ 512.532831][T16122] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 512.540253][T16122] /dev/rnullb0: Can't open blockdev [ 512.560026][ T5910] usb 1-1: USB disconnect, device number 26 [ 512.762941][T16135] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2635'. [ 512.785559][T16135] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2635'. [ 512.802341][T16135] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2635'. [ 513.217969][T16150] wlan1 speed is unknown, defaulting to 1000 [ 513.224844][T16150] wlan1 speed is unknown, defaulting to 1000 [ 513.231829][T16150] wlan1 speed is unknown, defaulting to 1000 [ 513.364427][T16150] infiniband syz0: set down [ 513.369421][ T6989] wlan1 speed is unknown, defaulting to 1000 [ 513.381404][T16150] infiniband syz0: added wlan1 [ 513.386873][T16150] syz0: rxe_create_cq: returned err = -12 [ 513.392761][T16150] infiniband syz0: Couldn't create ib_mad CQ [ 513.400553][T16150] infiniband syz0: Couldn't open port 1 [ 513.424518][T16150] RDS/IB: syz0: added [ 513.433285][T16150] smc: adding ib device syz0 with port count 1 [ 513.441372][T16150] smc: ib device syz0 port 1 has pnetid [ 513.448736][ T5910] wlan1 speed is unknown, defaulting to 1000 [ 513.455508][T16150] wlan1 speed is unknown, defaulting to 1000 [ 513.590852][T16150] wlan1 speed is unknown, defaulting to 1000 [ 513.704204][T16154] /dev/rnullb0: Can't lookup blockdev [ 513.763078][T16150] wlan1 speed is unknown, defaulting to 1000 [ 513.955485][T16150] wlan1 speed is unknown, defaulting to 1000 [ 514.018638][T16150] wlan1 speed is unknown, defaulting to 1000 [ 514.141436][T16172] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 514.149440][T16172] overlayfs: failed to set xattr on upper [ 514.155169][T16172] overlayfs: ...falling back to redirect_dir=nofollow. [ 514.162102][T16172] overlayfs: ...falling back to index=off. [ 514.168411][T16172] overlayfs: ...falling back to uuid=null. [ 514.176676][ T10] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 514.314436][T16174] block nbd0: Attempted send on invalid socket [ 514.325561][T16174] I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 514.335713][T16174] gfs2: error -5 reading superblock [ 514.394309][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 514.409812][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.418550][ T10] usb 5-1: Product: syz [ 514.422735][ T10] usb 5-1: Manufacturer: syz [ 514.429168][ T10] usb 5-1: SerialNumber: syz [ 514.458401][ T10] usb 5-1: config 0 descriptor?? [ 514.673027][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 514.742720][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 514.772237][ T10] usb 5-1: USB disconnect, device number 58 [ 515.040468][T16202] /dev/rnullb0: Can't open blockdev [ 515.157717][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2656'. [ 515.276396][ T10] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 515.438208][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.448578][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 515.458355][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 515.467515][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.479385][ T10] usb 5-1: config 0 descriptor?? [ 515.486964][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 515.493662][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 515.501337][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 515.510305][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 515.517471][ T10] usb 5-1: media controller created [ 515.523892][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 515.534606][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 515.543740][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 515.552578][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 515.564931][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 515.572003][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 515.692872][T16200] dvb-usb: bulk message failed: -22 (4/0) [ 515.727397][ T6963] dvb-usb: bulk message failed: -22 (1/0) [ 515.733177][ T6963] dvb-usb: error while querying for an remote control event. [ 515.916312][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 515.919371][ T30] audit: type=1326 audit(1756692539.448:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16214 comm="syz.6.2661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04a078ebe9 code=0x0 [ 515.922082][ T10] dvb-usb: error while querying for an remote control event. [ 516.077385][ T6963] dvb-usb: bulk message failed: -22 (1/0) [ 516.083156][ T6963] dvb-usb: error while querying for an remote control event. [ 516.246723][ T6963] dvb-usb: bulk message failed: -22 (1/0) [ 516.252498][ T6963] dvb-usb: error while querying for an remote control event. [ 516.339817][ T6989] usb 5-1: USB disconnect, device number 59 [ 516.371421][ T6989] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 516.414679][T16218] tty tty20: ldisc open failed (-12), clearing slot 19 [ 516.428065][T16228] autofs: Bad value for 'fd' [ 516.892306][T16254] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 516.899399][T16254] /dev/rnullb0: Can't open blockdev [ 517.562178][T16258] wlan1 speed is unknown, defaulting to 1000 [ 517.677119][T16260] /dev/rnullb0: Can't open blockdev [ 518.136404][ T9] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 518.264555][T16306] overlayfs: failed to clone upperpath [ 518.311646][ T9] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 518.321597][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.331339][ T9] usb 5-1: config 0 descriptor?? [ 518.422167][T16310] netlink: 212 bytes leftover after parsing attributes in process `syz.6.2688'. [ 518.977704][T16312] program syz.0.2689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.031608][T16314] IPVS: Unknown mcast interface: nicvf0 [ 519.226326][ T10] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 519.377564][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 519.386331][ T10] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 519.397301][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 519.405723][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.40 [ 519.414917][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.422976][ T10] usb 1-1: Product: syz [ 519.427195][ T10] usb 1-1: Manufacturer: syz [ 519.431958][ T10] usb 1-1: SerialNumber: syz [ 519.449132][ T10] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 519.464968][ T10] usb 1-1: no configuration chosen from 1 choice [ 519.484383][T16320] netlink: 'syz.7.2692': attribute type 1 has an invalid length. [ 519.492211][T16320] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2692'. [ 519.656776][T16322] netlink: 324 bytes leftover after parsing attributes in process `syz.6.2693'. [ 520.175823][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 520.192843][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 520.204967][ T9] asix 5-1:0.0: probe with driver asix failed with error -71 [ 520.238858][ T9] usb 5-1: USB disconnect, device number 60 [ 520.354088][T16326] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 520.361720][T16326] overlayfs: failed to set xattr on upper [ 520.367936][T16326] overlayfs: ...falling back to redirect_dir=nofollow. [ 520.374808][T16326] overlayfs: ...falling back to index=off. [ 520.380968][T16326] overlayfs: ...falling back to uuid=null. [ 520.469065][T16328] /dev/rnullb0: Can't open blockdev [ 520.475349][T16328] /dev/rnullb0: Can't open blockdev [ 520.804478][T16338] tipc: Enabled bearer , priority 10 [ 520.811674][T16338] /dev/rnullb0: Can't lookup blockdev [ 520.915079][T16342] /dev/rnullb0: Can't open blockdev [ 520.949913][T16344] ./cgroup: Can't lookup blockdev [ 521.011199][T16346] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 521.018627][T16346] overlayfs: failed to set xattr on upper [ 521.024431][T16346] overlayfs: ...falling back to redirect_dir=nofollow. [ 521.032022][T16346] overlayfs: ...falling back to index=off. [ 521.044955][T16346] overlayfs: ...falling back to uuid=null. [ 521.068599][T16348] No control pipe specified [ 521.146184][T16351] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2706'. [ 521.606378][ T5910] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 521.766428][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 521.774340][ T5910] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 521.783666][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.791720][ T5910] usb 5-1: Product: syz [ 521.795895][ T5910] usb 5-1: Manufacturer: syz [ 521.800640][ T5910] usb 5-1: SerialNumber: syz [ 521.809148][ T5910] r8152-cfgselector 5-1: Unknown version 0x0000 [ 521.815447][ T5910] r8152-cfgselector 5-1: config 0 descriptor?? [ 521.936344][ T24] tipc: Node number set to 2338245149 [ 521.971160][ T24] usb 1-1: USB disconnect, device number 27 [ 522.002283][T16369] /dev/rnullb0: Can't open blockdev [ 522.036695][ T5910] r8152-cfgselector 5-1: Unknown version 0x0000 [ 522.049214][ T5910] r8152-cfgselector 5-1: bad CDC descriptors [ 522.239435][ T5910] r8152-cfgselector 5-1: USB disconnect, device number 61 [ 522.241134][T16374] overlayfs: failed to clone upperpath [ 522.247682][T16364] /dev/rnullb0: Can't open blockdev [ 522.386364][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 522.566384][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 522.574315][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 522.582942][ T24] usb 1-1: config 5 has an invalid interface number: 103 but max is 0 [ 522.591153][ T24] usb 1-1: config 5 has no interface number 0 [ 522.597654][ T24] usb 1-1: config 5 interface 103 has no altsetting 0 [ 522.606028][ T24] usb 1-1: New USB device found, idVendor=0711, idProduct=0230, bcdDevice=3c.61 [ 522.615209][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.623252][ T24] usb 1-1: Product: syz [ 522.627547][ T24] usb 1-1: Manufacturer: syz [ 522.632180][ T24] usb 1-1: SerialNumber: syz [ 523.153416][T16402] overlayfs: failed to clone upperpath [ 523.353556][T16406] /dev/rnullb0: Can't lookup blockdev [ 523.412518][T16408] /dev/rnullb0: Can't lookup blockdev [ 524.937090][T16435] /dev/rnullb0: Can't open blockdev [ 525.019403][T16440] binder: 16439:16440 unknown command 0 [ 525.021564][T16441] binder: 16439:16441 unknown command 0 [ 525.035784][T16441] binder: 16439:16441 ioctl c0306201 200000000080 returned -22 [ 525.043698][T16440] binder: 16439:16440 ioctl c0306201 200000000080 returned -22 [ 525.050898][T16441] /dev/rnullb0: Can't open blockdev [ 525.059009][T16444] /dev/rnullb0: Can't open blockdev [ 525.664989][ T24] mct_u232 1-1:5.103: MCT U232 converter detected [ 525.713133][ T24] mct_u232 ttyUSB0: expected endpoint missing [ 525.722783][ T24] usb 1-1: USB disconnect, device number 28 [ 525.731509][ T24] mct_u232 1-1:5.103: device disconnected [ 525.949672][T16465] /dev/rnullb0: Can't open blockdev [ 526.581969][T16487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.626767][T16487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.659728][T16488] binder: BINDER_SET_CONTEXT_MGR already set [ 526.680063][T16488] binder: 16485:16488 ioctl 4018620d 200000000040 returned -16 [ 526.796588][ T6989] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 526.826579][T16491] /dev/rnullb0: Can't open blockdev [ 526.867064][T16493] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 526.874256][T16493] overlayfs: failed to set xattr on upper [ 526.888657][T16493] overlayfs: ...falling back to redirect_dir=nofollow. [ 526.901140][T16493] overlayfs: ...falling back to index=off. [ 526.912601][T16493] overlayfs: ...falling back to uuid=null. [ 527.276626][ T30] audit: type=1804 audit(1756692550.798:141): pid=16499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2752" name="rnullb0" dev="tmpfs" ino=2511 res=1 errno=0 [ 527.576560][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 527.726981][ T24] usb 1-1: too many configurations: 23, using maximum allowed: 8 [ 527.736057][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 527.756447][ T24] usb 1-1: can't read configurations, error -61 [ 527.896308][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 528.017340][ T6963] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 528.080498][ T24] usb 1-1: too many configurations: 23, using maximum allowed: 8 [ 528.092241][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 528.101162][ T24] usb 1-1: can't read configurations, error -61 [ 528.108170][ T24] usb usb1-port1: attempt power cycle [ 528.114941][T16521] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2761'. [ 528.166393][ T6963] usb 5-1: Using ep0 maxpacket: 16 [ 528.173318][ T6963] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.186886][ T6963] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 528.196016][ T6963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.204111][ T6963] usb 5-1: Product: syz [ 528.208393][ T6963] usb 5-1: Manufacturer: syz [ 528.213066][ T6963] usb 5-1: SerialNumber: syz [ 528.429321][T16513] netlink: 536 bytes leftover after parsing attributes in process `syz.4.2758'. [ 528.438693][T16513] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2758'. [ 528.456826][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 528.458013][ T6963] usb 5-1: 0:181 : does not exist [ 528.477555][ T24] usb 1-1: too many configurations: 23, using maximum allowed: 8 [ 528.483829][ T6963] usb 5-1: USB disconnect, device number 63 [ 528.492143][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 528.504692][ T24] usb 1-1: can't read configurations, error -61 [ 528.509866][T15773] udevd[15773]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.640772][T16539] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 528.647880][T16539] /dev/rnullb0: Can't open blockdev [ 528.656317][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 528.677425][ T24] usb 1-1: too many configurations: 23, using maximum allowed: 8 [ 528.687637][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 528.695271][ T24] usb 1-1: can't read configurations, error -61 [ 528.724862][ T24] usb usb1-port1: unable to enumerate USB device [ 528.880765][T16550] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.962536][ T30] audit: type=1804 audit(1756692552.488:142): pid=16563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2774" name="rnullb0" dev="tmpfs" ino=2511 res=1 errno=0 [ 529.044253][T16568] overlayfs: failed to clone upperpath [ 529.055351][T16571] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 529.063380][T16571] overlayfs: failed to set xattr on upper [ 529.070592][T16571] overlayfs: ...falling back to redirect_dir=nofollow. [ 529.077755][T16571] overlayfs: ...falling back to index=off. [ 529.083649][T16571] overlayfs: ...falling back to uuid=null. [ 529.447071][ T24] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 529.595312][ T30] audit: type=1800 audit(1756692553.118:143): pid=16585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2783" name="rnullb0" dev="tmpfs" ino=2511 res=0 errno=0 [ 529.616503][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 529.623137][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.634409][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.645140][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 529.658267][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.667713][ T24] usb 5-1: config 0 descriptor?? [ 530.135100][T16580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.144278][T16580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.153054][T16580] netlink: 'syz.4.2781': attribute type 6 has an invalid length. [ 530.161815][T16580] netlink: 'syz.4.2781': attribute type 6 has an invalid length. [ 530.174871][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 530.182354][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 530.192632][ T24] usb 5-1: USB disconnect, device number 64 [ 530.522890][T16600] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 530.532052][T16600] overlayfs: failed to set xattr on upper [ 530.538612][T16600] overlayfs: ...falling back to redirect_dir=nofollow. [ 530.545599][T16600] overlayfs: ...falling back to index=off. [ 530.551885][T16600] overlayfs: ...falling back to uuid=null. [ 530.775732][ T30] audit: type=1804 audit(1756692554.298:144): pid=16627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2798" name="rnullb0" dev="tmpfs" ino=2511 res=1 errno=0 [ 530.858297][T16632] overlayfs: failed to clone upperpath [ 531.126299][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 531.246528][ T24] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 531.279920][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.290912][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.301587][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 531.310703][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 531.318913][ T9] usb 1-1: SerialNumber: syz [ 531.386374][ T24] usb 5-1: device descriptor read/64, error -71 [ 531.529276][T16634] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 531.593795][T16657] ./cgroup: Can't lookup blockdev [ 531.636388][ T24] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 531.640543][ T9] usb 1-1: 0:2 : does not exist [ 531.654951][ T9] usb 1-1: unit 14 not found! [ 531.667105][ T9] usb 1-1: USB disconnect, device number 33 [ 531.682688][T15773] udevd[15773]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.776447][ T24] usb 5-1: device descriptor read/64, error -71 [ 531.886504][ T24] usb usb5-port1: attempt power cycle [ 532.183272][T16665] overlayfs: failed to clone upperpath [ 532.226303][ T24] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 532.279079][ T24] usb 5-1: device descriptor read/8, error -71 [ 532.400071][T16683] /dev/rnullb0: Can't open blockdev [ 532.502404][T16697] overlayfs: failed to clone upperpath [ 532.502688][T16698] /dev/rnullb0: Can't open blockdev [ 532.526311][ T24] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 532.558520][ T24] usb 5-1: device descriptor read/8, error -71 [ 532.571232][ T30] audit: type=1804 audit(1756692556.098:145): pid=16702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2821" name="rnullb0" dev="tmpfs" ino=2511 res=1 errno=0 [ 532.656169][T16712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2825'. [ 532.666608][T16712] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2825'. [ 532.678702][ T24] usb usb5-port1: unable to enumerate USB device [ 533.540088][T16721] /dev/rnullb0: Can't open blockdev [ 533.575526][T16726] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 533.582828][T16726] overlayfs: failed to set xattr on upper [ 533.589847][T16726] overlayfs: ...falling back to redirect_dir=nofollow. [ 533.597688][T16726] overlayfs: ...falling back to index=off. [ 533.603950][T16726] overlayfs: ...falling back to uuid=null. [ 533.745981][T16749] /dev/sg0: Can't lookup blockdev [ 533.874390][T16766] netlink: 'syz.6.2839': attribute type 29 has an invalid length. [ 533.885019][T16767] netlink: 'syz.6.2839': attribute type 29 has an invalid length. [ 533.894811][T16766] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2839'. [ 533.959002][T16773] /dev/rnullb0: Can't open blockdev [ 534.027503][T16778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2842'. [ 534.798666][T16798] /dev/rnullb0: Can't lookup blockdev [ 534.919763][ T30] audit: type=1804 audit(1756692558.448:146): pid=16810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2851" name="rnullb0" dev="tmpfs" ino=2511 res=1 errno=0 [ 535.029087][T16816] /dev/rnullb0: Can't open blockdev [ 535.276466][ T5910] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 535.396421][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 535.416295][ T5910] usb 1-1: device descriptor read/64, error -71 [ 535.511652][ T30] audit: type=1804 audit(1756692559.038:147): pid=16830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2858" name="rnullb0" dev="tmpfs" ino=2511 res=1 errno=0 [ 535.553294][T16832] /dev/rnullb0: Can't lookup blockdev [ 535.556301][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 535.565412][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 535.574564][ T9] usb 5-1: config 119 has an invalid interface number: 109 but max is 0 [ 535.583614][ T9] usb 5-1: config 119 has no interface number 0 [ 535.591252][ T9] usb 5-1: config 119 interface 109 has no altsetting 0 [ 535.600356][ T9] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=ed.67 [ 535.609495][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.617584][ T9] usb 5-1: Product: syz [ 535.621744][ T9] usb 5-1: Manufacturer: syz [ 535.626390][ T9] usb 5-1: SerialNumber: syz [ 535.667553][ T5910] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 535.797231][ T5910] usb 1-1: device descriptor read/64, error -71 [ 535.838433][T16825] /dev/rnullb0: Can't open blockdev [ 535.851633][ T9] kobil_sct 5-1:119.109: KOBIL USB smart card terminal converter detected [ 535.861682][ T9] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 535.872522][ T9] usb 5-1: USB disconnect, device number 69 [ 535.880502][ T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 535.890775][ T9] kobil_sct 5-1:119.109: device disconnected [ 535.909019][ T5910] usb usb1-port1: attempt power cycle [ 536.123526][T16834] could not allocate digest TFM handle md4 [ 536.247602][ T5910] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 536.267390][ T5910] usb 1-1: device descriptor read/8, error -71 [ 536.434990][T16855] /dev/rnullb0: Can't open blockdev [ 536.478515][T16857] /dev/rnullb0: Can't open blockdev [ 536.520280][ T5910] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 536.536585][T16861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.546939][ T5910] usb 1-1: device descriptor read/8, error -71 [ 536.666750][ T5910] usb usb1-port1: unable to enumerate USB device [ 536.784550][T16874] cgroup2: Unknown parameter 'obj_user' [ 536.792210][ T30] audit: type=1804 audit(1756692560.318:148): pid=16874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2872" name="rnullb0" dev="tmpfs" ino=2511 res=1 errno=0 [ 536.980314][T16893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2876'. [ 537.613973][ T30] audit: type=1326 audit(1756692561.138:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16873 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a078ebe9 code=0x7fc00000 [ 537.618284][T16895] sctp: [Deprecated]: syz.4.2877 (pid 16895) Use of int in maxseg socket option. [ 537.618284][T16895] Use struct sctp_assoc_value instead [ 537.673911][ T30] audit: type=1326 audit(1756692561.138:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16873 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04a078ebe9 code=0x7fc00000 [ 537.697087][ T30] audit: type=1326 audit(1756692561.138:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16873 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a078ebe9 code=0x7fc00000 [ 537.720213][ T30] audit: type=1326 audit(1756692561.138:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16873 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a078ebe9 code=0x7fc00000 [ 537.746631][T16897] MTD: Couldn't look up '/dev/rnullb0': -15 [ 537.866976][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.872675][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.878699][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.884478][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.890350][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.895955][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.903025][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.909456][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.915505][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.921220][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.927924][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.929982][T16917] /dev/rnullb0: Can't open blockdev [ 537.933588][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.944289][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.950077][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.955707][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.961523][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.967223][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.972885][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.981369][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.987062][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.992747][T16915] /dev/rnullb0: Can't lookup blockdev [ 537.998912][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.004735][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.010514][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.016182][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.022188][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.028071][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.033750][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.039925][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.045682][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.051765][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.058343][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.064088][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.069800][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.075550][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.081395][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.087428][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.093690][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.099422][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.105337][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.113019][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.119783][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.125456][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.131435][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.137195][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.142919][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.148738][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.154883][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.161107][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.167154][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.172765][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.178482][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.184414][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.190459][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.196038][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.202655][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.208401][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.214057][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.219752][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.225396][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.231096][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.236791][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.242385][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.248064][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.253675][T16915] /dev/rnullb0: Can't lookup blockdev [ 538.369702][ T30] audit: type=1804 audit(1756692561.898:153): pid=16925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2887" name="rnullb0" dev="tmpfs" ino=2511 res=1 errno=0 [ 538.456265][ T6989] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 538.477580][T16932] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 538.607552][ T6989] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 538.616311][ T6989] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 538.627474][ T6989] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 538.638529][ T6989] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 538.652294][ T6989] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 538.665024][ T6989] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 538.675843][ T6989] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 538.684377][ T6989] usb 1-1: Product: syz [ 538.690561][ T6989] usb 1-1: Manufacturer: syz [ 538.708053][ T6989] cdc_wdm 1-1:1.0: skipping garbage [ 538.713341][ T6989] cdc_wdm 1-1:1.0: skipping garbage [ 538.718858][T16938] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 538.725387][T16938] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 538.733663][ T6989] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 538.734448][T16938] vhci_hcd vhci_hcd.0: Device attached [ 538.741524][ T6989] cdc_wdm 1-1:1.0: Unknown control protocol [ 538.764547][T16939] vhci_hcd: connection closed [ 538.764827][ T6040] vhci_hcd: stop threads [ 538.774215][ T6040] vhci_hcd: release socket [ 538.779133][ T6040] vhci_hcd: disconnect device [ 538.788897][T16943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.798982][T16943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.909972][ C0] cdc_wdm 1-1:1.0: unknown notification 116 received: index 13617 len 0 [ 539.026419][ T6989] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 539.111772][ T24] usb 1-1: USB disconnect, device number 38 [ 539.157660][ T6989] usb 5-1: device descriptor read/64, error -71 [ 539.254367][T16946] Dead loop on virtual device ip6_vti0, fix it urgently! [ 539.265149][T16946] Dead loop on virtual device ip6_vti0, fix it urgently! [ 539.284883][T16946] Dead loop on virtual device ip6_vti0, fix it urgently! [ 539.306711][T16946] Dead loop on virtual device ip6_vti0, fix it urgently! [ 539.323145][T16946] Dead loop on virtual device ip6_vti0, fix it urgently! [ 539.332315][T16946] Dead loop on virtual device ip6_vti0, fix it urgently! [ 539.424248][T16953] /dev/rnullb0: Can't lookup blockdev [ 539.461074][T16955] /dev/rnullb0: Can't lookup blockdev [ 539.509083][ T6989] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 539.646281][ T6989] usb 5-1: device descriptor read/64, error -71 [ 539.757614][ T6989] usb usb5-port1: attempt power cycle [ 540.100633][ T30] audit: type=1804 audit(1756692563.498:154): pid=16971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2901" name="rnullb0" dev="tmpfs" ino=2511 res=1 errno=0 [ 540.134250][ T6989] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 540.176933][ T6989] usb 5-1: device descriptor read/8, error -71 [ 540.418205][ T6989] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 540.457876][ T6989] usb 5-1: device descriptor read/8, error -71 [ 540.577831][ T6989] usb usb5-port1: unable to enumerate USB device [ 541.142643][T16990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2906'. [ 541.436288][ T6989] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 541.596449][ T6989] usb 1-1: Invalid ep0 maxpacket: 16 [ 541.726325][ T6989] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 541.817762][T16994] /dev/rnullb0: Can't open blockdev [ 541.896277][ T6989] usb 1-1: Invalid ep0 maxpacket: 16 [ 541.916602][ T6989] usb usb1-port1: attempt power cycle [ 542.116395][ T30] audit: type=1804 audit(1756692565.638:155): pid=17006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2911" name="rnullb0" dev="tmpfs" ino=2511 res=1 errno=0 [ 542.696765][T17015] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 542.704175][T17015] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 542.711859][T17015] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 542.721132][T17015] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 542.728865][T17015] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 542.759506][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 542.772771][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 542.781799][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 542.790687][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 542.801677][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 542.867401][ C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 542.876623][ C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 542.885785][ C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 542.902358][ T9] usb 7-1: USB disconnect, device number 55 [ 542.909070][ T9] etas_es58x 7-1:0.2: Disconnecting syz syz [ 542.923809][ T6989] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 542.932881][T17019] /dev/rnullb0: Can't open blockdev [ 542.986380][T17013] wlan1 speed is unknown, defaulting to 1000 [ 542.997767][ T6989] usb 1-1: Invalid ep0 maxpacket: 16 [ 543.146288][ T6989] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 543.196556][ T6989] usb 1-1: Invalid ep0 maxpacket: 16 [ 543.226467][ T6989] usb usb1-port1: unable to enumerate USB device [ 543.265076][T17035] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2917'. [ 543.284432][T17035] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2917'. [ 543.300443][T17035] /dev/rnullb0: Can't open blockdev [ 543.403587][T17043] /dev/rnullb0: Can't open blockdev [ 543.529470][T17052] /dev/rnullb0: Can't open blockdev [ 543.633926][T17058] input: syz0 as /devices/virtual/input/input30 [ 544.083906][ T6052] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.105213][T17013] chnl_net:caif_netlink_parms(): no params data found [ 544.233198][ T6052] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.263605][T17013] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.304416][T17013] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.349950][T17013] bridge_slave_0: entered allmulticast mode [ 544.358754][T17013] bridge_slave_0: entered promiscuous mode [ 544.366809][T17083] /dev/rnullb0: Can't open blockdev [ 544.378540][ T6052] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.395846][T17013] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.403432][T17013] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.411440][T17013] bridge_slave_1: entered allmulticast mode [ 544.418767][T17013] bridge_slave_1: entered promiscuous mode [ 544.468080][T17088] /dev/rnullb0: Can't open blockdev [ 544.484248][T17088] /dev/rnullb0: Can't open blockdev [ 544.492943][ T6052] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.590284][T17013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.631225][T17013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.745682][T17013] team0: Port device team_slave_0 added [ 544.768573][T17013] team0: Port device team_slave_1 added [ 544.884768][T17013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.892152][ T5867] Bluetooth: hci1: command tx timeout [ 544.909671][T17013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.998996][T17013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.068151][T17013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.076032][T17013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.104646][T17013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.210127][ T6052] bridge_slave_1: left allmulticast mode [ 545.218045][ T6052] bridge_slave_1: left promiscuous mode [ 545.223984][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.237981][ T6052] bridge_slave_0: left allmulticast mode [ 545.243793][ T6052] bridge_slave_0: left promiscuous mode [ 545.250300][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.296482][ T9] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 545.417749][ T6052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.430431][ T6052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.441495][ T6052] bond0 (unregistering): Released all slaves [ 545.446480][ T9] usb 1-1: device descriptor read/64, error -71 [ 545.457437][T17013] hsr_slave_0: entered promiscuous mode [ 545.463753][T17013] hsr_slave_1: entered promiscuous mode [ 545.474581][T17013] debugfs: 'hsr0' already exists in 'hsr' [ 545.481061][T17013] Cannot create hsr debugfs directory [ 545.523305][ T6052] tipc: Disabling bearer [ 545.536250][ T6052] tipc: Left network mode [ 545.569237][ T6052] IPVS: stopping backup sync thread 15803 ... [ 545.656561][ T5910] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 545.707726][ T9] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 545.846298][ T9] usb 1-1: device descriptor read/64, error -71 [ 545.855107][ T6052] hsr_slave_0: left promiscuous mode [ 545.862032][ T6052] hsr_slave_1: left promiscuous mode [ 545.868275][ T5910] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 545.886156][ T5910] usb 5-1: config 1 interface 0 has no altsetting 0 [ 545.893663][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.903395][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.912811][ T5910] usb 5-1: New USB device found, idVendor=05ac, idProduct=8242, bcdDevice= 0.40 [ 545.922430][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.942920][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.944753][T17133] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2937'. [ 545.952595][ T5910] usb 5-1: Product: 岴گ諃꽯啤랪殹彁笏అ턵ꤟ몧䁊້熕䖄䫫픁祛঑邿緥詵횴ꎊ谗繩닡⸣㕳ཹ铛糷ḷ㧫爲֩廤浈쭆䘵쑠唐蔭ꍗ莻鍍妅⨧Ꮃ亅ꃒ勶ꄓ谑쒶䠕⍗愝䈑譚瞮診扅頯╳䳙M蹩 [ 545.984486][ T9] usb usb1-port1: attempt power cycle [ 545.984574][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.998249][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2937'. [ 546.014675][ T5910] usb 5-1: Manufacturer: 霧᧝米ᅱ릂ᴜ椈ᑭ蔦愳ᎍ培鋙껒䥁䛿밫垅臈첃뫻䔈臫㦵䠟ꔸ趠鼔ጆॕ垄鬭쑣碦㍒ﱢ퓋Ⲭ䉩잔釠쭮ꥦ씣䱑 [ 546.033180][ T6052] veth1_macvtap: left promiscuous mode [ 546.038754][ T6052] veth0_macvtap: left promiscuous mode [ 546.044369][ T6052] veth1_vlan: left promiscuous mode [ 546.051772][ T6052] veth0_vlan: left promiscuous mode [ 546.057441][ T5910] usb 5-1: SerialNumber: ࠝ [ 546.154526][T17137] /dev/rnullb0: Can't open blockdev [ 546.205910][ T6052] team0 (unregistering): Port device team_slave_1 removed [ 546.349407][ T9] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 546.390537][ T9] usb 1-1: device descriptor read/8, error -71 [ 546.508549][ T5910] usbhid 5-1:1.0: can't add hid device: -71 [ 546.524750][ T5910] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 546.549477][ T5910] usb 5-1: USB disconnect, device number 74 [ 546.610815][ T6052] IPVS: stop unused estimator thread 0... [ 546.656719][ T9] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 546.686918][ T9] usb 1-1: device descriptor read/8, error -71 [ 546.806652][ T9] usb usb1-port1: unable to enumerate USB device [ 546.860023][T17013] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 546.872663][T17013] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 546.884352][T17013] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 546.894616][T17013] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 546.968759][T17013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.976340][ T5867] Bluetooth: hci1: command tx timeout [ 546.992136][T17013] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.003943][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.011140][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.050005][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.057189][ T6040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.235648][T17182] sctp: [Deprecated]: syz.7.2945 (pid 17182) Use of int in maxseg socket option. [ 547.235648][T17182] Use struct sctp_assoc_value instead [ 547.294348][T17013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.468306][ T6989] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 547.513671][T17013] veth0_vlan: entered promiscuous mode [ 547.531249][T17013] veth1_vlan: entered promiscuous mode [ 547.555295][T17013] veth0_macvtap: entered promiscuous mode [ 547.568338][T17013] veth1_macvtap: entered promiscuous mode [ 547.589887][T17013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.600822][T17204] /dev/rnullb0: Can't open blockdev [ 547.601707][T17013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.625559][ T6040] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.627023][ T6989] usb 5-1: Using ep0 maxpacket: 32 [ 547.642685][ T6040] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.657521][ T6989] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.668024][ T6989] usb 5-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 547.680233][ T6040] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.690403][ T6040] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.707853][ T6989] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 547.722335][ T6989] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 547.734548][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.739499][ T6989] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 547.758662][ T6989] usb 5-1: config 0 interface 0 has no altsetting 0 [ 547.765303][ T6989] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 547.770942][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.775890][ T6989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.798853][ T6989] usb 5-1: config 0 descriptor?? [ 547.818974][T17213] fuse: Bad value for 'user_id' [ 547.823881][T17213] fuse: Bad value for 'user_id' [ 547.830714][T17214] netlink: 'syz.7.2953': attribute type 4 has an invalid length. [ 547.831367][ T6038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.842743][T17213] netlink: 'syz.7.2953': attribute type 4 has an invalid length. [ 547.852730][ T6038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.207451][T17237] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2960'. [ 548.219579][T17237] /dev/rnullb0: Can't open blockdev [ 548.234920][ T6989] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 548.258915][ T6989] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 548.268322][ T6989] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 548.277759][ T6989] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 548.285969][ T6989] hid-thrustmaster 0003:044F:B65D.0019: unknown main item tag 0x0 [ 548.306500][ T6989] hid-thrustmaster 0003:044F:B65D.0019: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 548.349930][ T6989] hid-thrustmaster 0003:044F:B65D.0019: setup data couldn't be sent [ 548.412823][T17245] /dev/rnullb0: Can't open blockdev [ 548.618373][ C1] hid-thrustmaster 0003:044F:B65D.0019: URB to get model id failed with error -71 [ 548.619721][ T9] usb 5-1: USB disconnect, device number 75 [ 548.801570][T17260] netlink: 'syz.0.2968': attribute type 11 has an invalid length. [ 548.812098][T17260] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2968'. [ 548.867467][T17268] netlink: 'syz.0.2970': attribute type 10 has an invalid length. [ 548.880836][T17268] team0: Port device geneve1 added [ 548.906369][ T5997] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 549.056375][ T5867] Bluetooth: hci1: command tx timeout [ 549.086302][ T5997] usb 7-1: Using ep0 maxpacket: 16 [ 549.097167][ T5997] usb 7-1: config index 0 descriptor too short (expected 27080, got 56) [ 549.105553][ T5997] usb 7-1: config 198 has an invalid descriptor of length 131, skipping remainder of the config [ 549.124790][ T5997] usb 7-1: config 198 has 0 interfaces, different from the descriptor's value: 24 [ 549.149959][ T5997] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 549.159077][ T5997] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 549.176241][ T5997] usb 7-1: Manufacturer: syz [ 549.389610][T17257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.404353][T17257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.418021][ T5997] usb 7-1: USB disconnect, device number 56 [ 549.622800][T17280] /dev/rnullb0: Can't open blockdev [ 550.159282][T17304] /dev/rnullb0: Can't open blockdev [ 550.262651][T17312] /dev/rnullb0: Can't open blockdev [ 550.315998][T17308] wlan1 speed is unknown, defaulting to 1000 [ 550.909899][T17335] /dev/rnullb0: Can't open blockdev [ 551.001346][T17341] Malformed UNC in devname [ 551.001346][T17341] [ 551.013988][T17341] CIFS: VFS: Malformed UNC in devname [ 551.014172][T17339] netlink: 'syz.7.2989': attribute type 4 has an invalid length. [ 551.033965][T17343] overlayfs: failed to resolve './file0': -2 [ 551.056297][T17339] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2989'. [ 551.069157][T17339] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 551.146745][ T5867] Bluetooth: hci1: command tx timeout [ 551.173255][T17346] /dev/rnullb0: Can't open blockdev [ 551.611245][T17367] binder: 17365:17367 ioctl c0046209 0 returned -22 [ 551.731792][T17370] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 551.746101][T17370] /dev/rnullb0: Can't open blockdev [ 551.843477][T17378] overlayfs: failed to resolve './file1': -2 [ 552.286902][T17396] /dev/rnullb0: Can't open blockdev [ 552.347150][T17396] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.357743][T17396] qnx6: unable to read the first superblock [ 552.363843][T17396] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.383307][T17396] qnx6: unable to read the first superblock [ 552.393378][T17396] qnx6: unable to read the first superblock [ 552.763926][T17413] overlayfs: failed to resolve './file1': -2 [ 552.989741][T17423] /dev/rnullb0: Can't open blockdev [ 553.066299][ T6989] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 553.182197][T17428] /dev/rnullb0: Can't open blockdev [ 553.187911][T17427] /dev/rnullb0: Can't open blockdev [ 553.196611][ T6989] usb 1-1: device descriptor read/64, error -71 [ 553.267433][ T24] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 553.416459][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 553.428829][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 553.440639][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.449746][ T6989] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 553.458935][ T24] usb 5-1: Product: syz [ 553.464000][ T24] usb 5-1: Manufacturer: syz [ 553.469022][ T24] usb 5-1: SerialNumber: syz [ 553.475341][ T24] usb 5-1: config 0 descriptor?? [ 553.489702][ T24] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 553.586278][ T6989] usb 1-1: device descriptor read/64, error -71 [ 553.698440][ T6989] usb usb1-port1: attempt power cycle [ 554.066452][ T6989] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 554.099734][ T6989] usb 1-1: device descriptor read/8, error -71 [ 554.110223][T17425] /dev/rnullb0: Can't open blockdev [ 554.123280][ T24] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 554.135454][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 554.145985][ T24] usb 5-1: USB disconnect, device number 76 [ 554.701238][T17439] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 554.799306][T17441] netlink: 'syz.7.3022': attribute type 3 has an invalid length. [ 554.809834][T17441] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3022'. [ 554.870024][T17443] overlayfs: failed to resolve './file1': -2 [ 555.016736][ T30] audit: type=1326 audit(1756692834.538:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17446 comm="syz.7.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77dc78ebe9 code=0x7ffc0000 [ 555.050269][ C1] ------------[ cut here ]------------ [ 555.055777][ C1] WARNING: ./include/linux/skbuff.h:1165 at nf_send_unreach6+0x828/0xa20, CPU#1: kworker/1:5/5924 [ 555.066438][ C1] Modules linked in: [ 555.070364][ C1] CPU: 1 UID: 0 PID: 5924 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 555.079771][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.089896][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 555.090163][ T30] audit: type=1326 audit(1756692834.538:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17446 comm="syz.7.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f77dc78ebe9 code=0x7ffc0000 [ 555.095969][ C1] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 555.095996][ C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 555.096014][ C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246 [ 555.149729][ C1] RAX: ffffffff8a51b3b7 RBX: ffff88809c114280 RCX: ffff888067c43c00 [ 555.157743][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.165734][ C1] RBP: ffffc90000a08568 R08: ffff88803d2bc183 R09: 1ffff11007a57830 [ 555.173784][ C1] R10: dffffc0000000000 R11: ffffed1007a57831 R12: ffff888064386101 [ 555.181809][ C1] R13: dffffc0000000001 R14: 1ffff1101382285b R15: 0000000000000000 [ 555.189851][ C1] FS: 0000000000000000(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 555.198843][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.205441][ C1] CR2: 00007f77dd4f56c0 CR3: 000000000e338000 CR4: 00000000003526f0 [ 555.213481][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 555.221513][ C1] DR3: 00000000000032e7 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 555.229643][ C1] Call Trace: [ 555.232941][ C1] [ 555.235800][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 555.240474][ C1] ? __pfx_nf_send_unreach6+0x10/0x10 [ 555.240832][ T30] audit: type=1326 audit(1756692834.538:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17446 comm="syz.7.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77dc78ebe9 code=0x7ffc0000 [ 555.245863][ C1] ? unwind_next_frame+0xa5/0x2390 [ 555.245892][ C1] ? unwind_next_frame+0xa5/0x2390 [ 555.278507][ C1] ? rcu_is_watching+0x15/0xb0 [ 555.283299][ C1] ? unwind_next_frame+0xa5/0x2390 [ 555.288467][ C1] nft_reject_inet_eval+0x441/0x690 [ 555.293696][ C1] nft_do_chain+0x40c/0x1920 [ 555.298338][ C1] ? unwind_next_frame+0xa5/0x2390 [ 555.303476][ C1] ? rcu_is_watching+0x15/0xb0 [ 555.308308][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 555.313355][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 555.318249][ C1] ? rcu_is_watching+0x15/0xb0 [ 555.323027][ C1] ? unwind_next_frame+0xa5/0x2390 [ 555.328200][ C1] nft_do_chain_inet+0x25d/0x340 [ 555.333152][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 555.338666][ C1] ? NF_HOOK+0x9a/0x3a0 [ 555.341046][T17456] /dev/rnullb0: Can't open blockdev [ 555.342833][ C1] ? rcu_is_watching+0x15/0xb0 [ 555.352799][ C1] ? lock_acquire+0x5f/0x360 [ 555.357424][ C1] ? ip_sabotage_in+0x57/0x270 [ 555.362207][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 555.362261][ T30] audit: type=1326 audit(1756692834.538:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17446 comm="syz.7.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f77dc78ebe9 code=0x7ffc0000 [ 555.367710][ C1] nf_hook_slow+0xc5/0x220 [ 555.394530][ C1] NF_HOOK+0x206/0x3a0 [ 555.398646][ C1] ? skb_orphan+0xaf/0xd0 [ 555.402996][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 555.408244][ C1] ? NF_HOOK+0x9a/0x3a0 [ 555.412430][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 555.417068][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 555.422289][ C1] __netif_receive_skb+0xd3/0x380 [ 555.427364][ C1] ? process_backlog+0x2d5/0x14f0 [ 555.432414][ C1] process_backlog+0x60e/0x14f0 [ 555.437318][ C1] ? __pfx_process_backlog+0x10/0x10 [ 555.442624][ C1] ? net_rx_action+0x51b/0xe30 [ 555.447445][ C1] ? rcu_is_watching+0x15/0xb0 [ 555.452240][ C1] __napi_poll+0xc4/0x360 [ 555.456630][ C1] net_rx_action+0x707/0xe30 [ 555.461246][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 555.466383][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 555.471599][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 555.476943][ C1] handle_softirqs+0x283/0x870 [ 555.481726][ C1] ? do_softirq+0xec/0x180 [ 555.486151][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 555.491470][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 555.497424][ C1] do_softirq+0xec/0x180 [ 555.500418][ T30] audit: type=1326 audit(1756692834.538:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17446 comm="syz.7.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77dc78ebe9 code=0x7ffc0000 [ 555.501700][ C1] [ 555.526969][ C1] [ 555.529907][ C1] ? __pfx_do_softirq+0x10/0x10 [ 555.534780][ C1] ? rcu_is_watching+0x15/0xb0 [ 555.539581][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 555.544800][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 555.550584][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 555.555638][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 555.561401][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 555.566559][ C1] ? rcu_is_watching+0x15/0xb0 [ 555.571343][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 555.577118][ C1] process_scheduled_works+0xae1/0x17b0 [ 555.582702][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 555.588734][ C1] worker_thread+0x8a0/0xda0 [ 555.593343][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 555.599738][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 555.601366][ T30] audit: type=1326 audit(1756692834.538:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17446 comm="syz.7.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f77dc78ebe9 code=0x7ffc0000 [ 555.605642][ C1] ? __kthread_parkme+0x7b/0x200 [ 555.632925][ C1] kthread+0x711/0x8a0 [ 555.637039][ C1] ? __pfx_worker_thread+0x10/0x10 [ 555.642172][ C1] ? __pfx_kthread+0x10/0x10 [ 555.646803][ C1] ? rcu_is_watching+0x15/0xb0 [ 555.651584][ C1] ? __pfx_kthread+0x10/0x10 [ 555.656231][ C1] ret_from_fork+0x47c/0x820 [ 555.660846][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 555.665980][ C1] ? __switch_to_asm+0x39/0x70 [ 555.670808][ C1] ? __switch_to_asm+0x33/0x70 [ 555.675593][ C1] ? __pfx_kthread+0x10/0x10 [ 555.680249][ C1] ret_from_fork_asm+0x1a/0x30 [ 555.685040][ C1] [ 555.688124][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 555.695419][ C1] CPU: 1 UID: 0 PID: 5924 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 555.704802][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.714964][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 555.721060][ C1] Call Trace: [ 555.724351][ C1] [ 555.727206][ C1] dump_stack_lvl+0x99/0x250 [ 555.731822][ C1] ? __asan_memcpy+0x40/0x70 [ 555.736430][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.741635][ C1] ? __pfx__printk+0x10/0x10 [ 555.746221][ C1] vpanic+0x281/0x750 [ 555.750198][ C1] ? __pfx_vpanic+0x10/0x10 [ 555.754690][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 555.759959][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 555.765145][ C1] panic+0xb9/0xc0 [ 555.768856][ C1] ? __pfx_panic+0x10/0x10 [ 555.773261][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 555.778185][ C1] __warn+0x334/0x4c0 [ 555.782155][ C1] ? nf_send_unreach6+0x828/0xa20 [ 555.787168][ C1] ? nf_send_unreach6+0x828/0xa20 [ 555.792180][ C1] report_bug+0x2be/0x4f0 [ 555.796498][ C1] ? nf_send_unreach6+0x828/0xa20 [ 555.801510][ C1] ? nf_send_unreach6+0x828/0xa20 [ 555.806523][ C1] ? nf_send_unreach6+0x82a/0xa20 [ 555.811536][ C1] handle_bug+0x84/0x160 [ 555.815762][ C1] exc_invalid_op+0x1a/0x50 [ 555.820248][ C1] asm_exc_invalid_op+0x1a/0x20 [ 555.825084][ C1] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 555.830710][ C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 555.850303][ C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246 [ 555.856359][ C1] RAX: ffffffff8a51b3b7 RBX: ffff88809c114280 RCX: ffff888067c43c00 [ 555.864315][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.872272][ C1] RBP: ffffc90000a08568 R08: ffff88803d2bc183 R09: 1ffff11007a57830 [ 555.880260][ C1] R10: dffffc0000000000 R11: ffffed1007a57831 R12: ffff888064386101 [ 555.888508][ C1] R13: dffffc0000000001 R14: 1ffff1101382285b R15: 0000000000000000 [ 555.896487][ C1] ? nf_send_unreach6+0x827/0xa20 [ 555.901552][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 555.906139][ C1] ? __pfx_nf_send_unreach6+0x10/0x10 [ 555.911507][ C1] ? unwind_next_frame+0xa5/0x2390 [ 555.916612][ C1] ? unwind_next_frame+0xa5/0x2390 [ 555.921711][ C1] ? rcu_is_watching+0x15/0xb0 [ 555.926494][ C1] ? unwind_next_frame+0xa5/0x2390 [ 555.931598][ C1] nft_reject_inet_eval+0x441/0x690 [ 555.936785][ C1] nft_do_chain+0x40c/0x1920 [ 555.941359][ C1] ? unwind_next_frame+0xa5/0x2390 [ 555.946456][ C1] ? rcu_is_watching+0x15/0xb0 [ 555.951216][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 555.956222][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 555.961061][ C1] ? rcu_is_watching+0x15/0xb0 [ 555.965814][ C1] ? unwind_next_frame+0xa5/0x2390 [ 555.970934][ C1] nft_do_chain_inet+0x25d/0x340 [ 555.975873][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 555.981318][ C1] ? NF_HOOK+0x9a/0x3a0 [ 555.985462][ C1] ? rcu_is_watching+0x15/0xb0 [ 555.990239][ C1] ? lock_acquire+0x5f/0x360 [ 555.994815][ C1] ? ip_sabotage_in+0x57/0x270 [ 555.999609][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 556.005093][ C1] nf_hook_slow+0xc5/0x220 [ 556.009523][ C1] NF_HOOK+0x206/0x3a0 [ 556.013594][ C1] ? skb_orphan+0xaf/0xd0 [ 556.017915][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 556.023102][ C1] ? NF_HOOK+0x9a/0x3a0 [ 556.027243][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 556.031821][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 556.037013][ C1] __netif_receive_skb+0xd3/0x380 [ 556.042026][ C1] ? process_backlog+0x2d5/0x14f0 [ 556.047040][ C1] process_backlog+0x60e/0x14f0 [ 556.051886][ C1] ? __pfx_process_backlog+0x10/0x10 [ 556.057156][ C1] ? net_rx_action+0x51b/0xe30 [ 556.061916][ C1] ? rcu_is_watching+0x15/0xb0 [ 556.066688][ C1] __napi_poll+0xc4/0x360 [ 556.071023][ C1] net_rx_action+0x707/0xe30 [ 556.075613][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 556.080718][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 556.085913][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 556.091192][ C1] handle_softirqs+0x283/0x870 [ 556.095948][ C1] ? do_softirq+0xec/0x180 [ 556.100354][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 556.105626][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 556.111512][ C1] do_softirq+0xec/0x180 [ 556.115752][ C1] [ 556.118671][ C1] [ 556.121588][ C1] ? __pfx_do_softirq+0x10/0x10 [ 556.126430][ C1] ? rcu_is_watching+0x15/0xb0 [ 556.131189][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 556.136379][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 556.142094][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 556.147108][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 556.152824][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 556.157926][ C1] ? rcu_is_watching+0x15/0xb0 [ 556.162680][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 556.168388][ C1] process_scheduled_works+0xae1/0x17b0 [ 556.173928][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 556.179896][ C1] worker_thread+0x8a0/0xda0 [ 556.184477][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 556.190833][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 556.196738][ C1] ? __kthread_parkme+0x7b/0x200 [ 556.201682][ C1] kthread+0x711/0x8a0 [ 556.205746][ C1] ? __pfx_worker_thread+0x10/0x10 [ 556.210846][ C1] ? __pfx_kthread+0x10/0x10 [ 556.215442][ C1] ? rcu_is_watching+0x15/0xb0 [ 556.220194][ C1] ? __pfx_kthread+0x10/0x10 [ 556.224775][ C1] ret_from_fork+0x47c/0x820 [ 556.229352][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 556.234455][ C1] ? __switch_to_asm+0x39/0x70 [ 556.239202][ C1] ? __switch_to_asm+0x33/0x70 [ 556.243953][ C1] ? __pfx_kthread+0x10/0x10 [ 556.248533][ C1] ret_from_fork_asm+0x1a/0x30 [ 556.253287][ C1] [ 556.256733][ C1] Kernel Offset: disabled [ 556.261061][ C1] Rebooting in 86400 seconds..