last executing test programs: 24m52.443195414s ago: executing program 32 (id=411): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000978000/0x3000)=nil, 0x3000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 21m37.841421417s ago: executing program 33 (id=1378): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12014204c2099b20480b032052a50102030109022400010405c80e09046508029db71e090905e9"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12014204c2099b20480b032052a50102030109022400010405c80e09046508029db71e090905e9"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x11, 0x3, 0x4000000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000180)={r5, 0x6}, 0x8) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) (async) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r7, 0x890d, 0x0) close(0xffffffffffffffff) syz_usb_control_io(r6, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 21m8.434237791s ago: executing program 34 (id=1620): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004000) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000000ac0)=""/138, 0x8a}], 0x2}, 0x0) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='bfs\x00', 0x120c002, 0x0) 20m47.607298376s ago: executing program 35 (id=1738): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x440140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x110, r0, 0xebe3b000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x110, r0, 0xebe3b000) fsetxattr(r0, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)=',\xdb@!\x16@(^/,,\x000Q\xca\x11\x8b\x892\x1b\x16', 0x15, 0xa378a364449aa1e5) (async) fsetxattr(r0, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)=',\xdb@!\x16@(^/,,\x000Q\xca\x11\x8b\x892\x1b\x16', 0x15, 0xa378a364449aa1e5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000006bc096f0bb63062f971dbe29f8e4a73ab3bbac859f6ee94172ea86b336d0157707c6f0a80a5b5cb7094c8c9ec2092c88881aedc2a0b7f0ba27000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000040007800c0002000000000000000000"], 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8905, &(0x7f00000006c0)) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000300)=0x30, 0x1) 20m44.855609022s ago: executing program 36 (id=1666): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r0, r3, 0x0, 0x7ffff000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0x200, {0x0}, {0xee00}, 0x9, 0x1000}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000080)=""/166) ptrace$getenv(0x4201, r4, 0xfffffffffffffffc, &(0x7f0000000040)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000001, 0x30, r0, 0x1000) 19m46.501604197s ago: executing program 37 (id=1975): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) futex(0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x2000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0xa}, &(0x7f0000000180)=""/232, 0xe8, &(0x7f0000000280)=""/150, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6}, 0x58) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r4 = open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) r5 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r7, 0x1, r4, 0x7, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000004c0)=r7) move_pages(r2, 0x7, &(0x7f0000000340)=[&(0x7f00001e3000/0x4000)=nil, &(0x7f00003b7000/0x2000)=nil, &(0x7f0000045000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00004d6000/0x3000)=nil], &(0x7f0000000440)=[0xeaf3, 0x9, 0x6, 0x966, 0x7fff, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x2) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000140)={0x3, 0x500}) mmap(&(0x7f000023e000/0x1000)=nil, 0x1000, 0x3000003, 0x13, r0, 0xa4717000) 18m45.071352919s ago: executing program 38 (id=2380): ioprio_set$pid(0x1, 0x0, 0x2007) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x2) (async, rerun: 32) sendfile(r0, r0, 0x0, 0x7ffff000) (rerun: 32) 17m16.432427997s ago: executing program 39 (id=2540): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x11, 0x3, 0x4000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="19d292247d478c6e2f573dce7a4f80cfb6c3c45178110eaab7fa3a33eb4039df41fad803f6c1067c0a73f34bc748bf371582eb1ef2bf314614570c8a", @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32=r5, @ANYBLOB="14000380100003800c0001800800010001000000"], 0x34}, 0x1, 0x0, 0x0, 0x2400c054}, 0x4044014) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r7, r8}}}], 0x20, 0x40044}}], 0x1, 0x4) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@multicast2, 0x4e21, 0x4, 0x4e21, 0x0, 0x2, 0x120, 0x20, 0x2b, r5, r8}, {0x4, 0x8, 0x7, 0x4f2, 0xe8f, 0x9, 0x7, 0x40}, {0xc42, 0x7, 0xfffffffffffffff9, 0x3}, 0x6, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d4, 0x33}, 0xa, @in=@multicast1, 0x3501, 0x3, 0x0, 0x6, 0x7ff, 0xb, 0x4269}}, 0xe8) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f00000001c0)={0x7ffffffe, @bcast, @bpq0, 0x2, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x8, 0x7}, 0xc) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r10, 0x40345410, &(0x7f00000004c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r10, 0x80605414, 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @local}, 0x1c) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 16m37.291140213s ago: executing program 40 (id=2672): keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000000c0)={0x0}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045520, &(0x7f0000002a40)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x4b63, 0x0) sendfile(r1, r0, 0x0, 0x7fffefff) fadvise64(r0, 0x9, 0x80000000009, 0x2) sendfile(r0, r0, 0x0, 0x1) 16m36.349843613s ago: executing program 41 (id=2679): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x3ff, 0x2000) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000100)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) writev(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000100)="f9", 0x1}], 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x8008af83, &(0x7f0000000140)={0x0, r1}) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000040)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 15m39.609184972s ago: executing program 42 (id=3036): write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0xdf88, 0xffffffff}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000001080)=0xfff, 0xfff) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)=ANY=[], 0x2e) getsockopt$bt_hci(r1, 0x84, 0x85, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0xffffc000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101280, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f00000000c0)={r6, 0xe0, &(0x7f0000000180)=""/224}) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000) 15m8.776743928s ago: executing program 43 (id=3086): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e) getdents64(r2, &(0x7f0000000200)=""/179, 0xb3) lseek(r2, 0xfffffffffffffffe, 0x1) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="b80e008ed866b9a90800000f32f30fa7d0ba430066b80000008066ef65640fc71c660f38341a660ff2da660fc73066b8000000000f23c80f21f866350400a0000f23f80f30", 0x45}], 0x1, 0x11, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000240)={{0x3, 0x0, 0x80, {0xeeee0000, 0xdddd1000, 0x3}}, "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", "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"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8010, r7, 0x5708e000) 14m25.815960861s ago: executing program 2 (id=3301): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_LOCK(r1, 0x6405) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16], 0x248}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0xc000003, 0x0, 0x0, 0x0, 0x4}) ioprio_set$uid(0x3, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="e370d6", 0x3}], 0x1) 14m25.392363878s ago: executing program 2 (id=3306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={r6, 0x3}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x5) syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000001000/0x400000)=nil) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x8b6, 0x0, 0x6}, {0x40000001, 0x0, 0x7}]}) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0x5c}}, 0x0) r10 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x1, 0xa, 0xb, '\x00', 0x7}) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f00000002c0)=0x10000) read$FUSE(r10, &(0x7f0000000440)={0x2020}, 0x2020) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 14m24.356081006s ago: executing program 2 (id=3320): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x80000000, 0x203, 0x100000000000fffd, 0xffffffffffffffff, 0x200000000000006, 0xfffffffffffffffd, 0x200, 0x8, 0x6, 0x80000005, 0x1}) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000300)={0x1, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6651cb5e0a3eeda1a7777d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db07", {0x2, 0x1ff}}) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ad0b19196c79eb5}) r6 = dup(r0) (async) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f00000016c0)={0x0, [0x7, 0x0, 0x61e0e01a], [{0x38f7, 0x2, 0x1, 0x1}, {0x6, 0x1, 0x1, 0x1, 0x1, 0x1}, {0xffff, 0xfffff0fd, 0x1, 0x1}, {0x9, 0xa54, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x8, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1000, 0xfff, 0x0, 0x1}, {0x7a6, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x81d2, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x0, 0xbe66, 0x0, 0x1, 0x1}, {0x10, 0xef9, 0x1}], 0xba0}) write$UHID_INPUT(r6, &(0x7f0000000680)={0x9, {"a2e3ad214fc752f91b29090942f70e0dd038e7ff7fc6e5539b324c078b089b34313b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd736d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25987969a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e89198f595dc4d470e01002a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d0db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) (async) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x3132564e, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3}}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) (async) accept(r9, &(0x7f0000000380), 0x0) (async) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r10, 0x7dfff000) 14m22.143026506s ago: executing program 2 (id=3328): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fd, 0x2, 0x8010000, 0x2000, &(0x7f00007db000/0x2000)=nil}) (async) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x800000, 0x0) 14m21.9245285s ago: executing program 2 (id=3329): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000600), 0x200683, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8']) chdir(&(0x7f0000000140)='./file0\x00') r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x7f778000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x10000, 0xf, 0x1, 0x3, 0x9, 0xa, 0x6, 0x5, 0xe, 0x2e, 0x4b}, {0x2, 0xdddd0000, 0x0, 0x6, 0x2, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x21, 0xfc}, {0x6000, 0xdddd1000, 0xf, 0x9d, 0x13, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0x4, 0x8000000, 0xd, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000000000001b"]) write$UHID_DESTROY(r1, &(0x7f0000000100), 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="40000400000040d11c5f"], 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x57789000) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x21, 0x90, {0x90, 0x23, "2e86512bc90f2b8dfe5058feaa279f01ce60b62b3dde71b10715c1e7582b9bcd8741c8a3a9083a38e2eed25802fc2071aaf9667e69fab6117b7bd88236ea51cad055cffd74d91118e0bcbfd0335ded7e4670ce63837c6cae94760952b131e7816abd61bd9a55b02b21a14ec5956ab797b22a838a2b5862c2925d4d9b8576d5a984df09e7fcf8f3dd3f011ba4fa58"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x0, 0x7, 0x65, "acd4b05b835f19170801fc89d4ca65ad8286b7761eaadf7e881090219f52ba8324852027ffc545131384c2c1fe2d935d43f409c091178bfba225d9923e876792d9b8bece38b27fefb1f48878c14b3ea8606df8acbd80afda7dd8c77fba1a2013e4b41954ed"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x800, 0x8, 0xbd0a, 0xfff, 0x1ff, 0x3, 0x5, 0x535243bb, 0x1f2, 0x8001, 0x6, 0xe}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0xaa13}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000005c0)={'veth1_vlan\x00', @remote}) syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x20, 0x140c, 0x31, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004400}, 0x20004044) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 14m20.673382754s ago: executing program 2 (id=3336): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x35, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x36) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020de2802110000000000010902240001000a0000090400000103000000092119000001220500090581030000000000"], 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r4, &(0x7f00000000c0)='maps\x00') syz_usb_control_io(r3, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000e95e58000000060a0b040000000000000000020000002c000480280001800a0001006d61746368000000180002800a0001006f776e657200000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x80}}, 0x4048010) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_procfs(r4, &(0x7f00000000c0)='fd/3\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r8}}) 14m4.39215607s ago: executing program 44 (id=3336): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x35, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x36) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020de2802110000000000010902240001000a0000090400000103000000092119000001220500090581030000000000"], 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r4, &(0x7f00000000c0)='maps\x00') syz_usb_control_io(r3, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000e95e58000000060a0b040000000000000000020000002c000480280001800a0001006d61746368000000180002800a0001006f776e657200000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x80}}, 0x4048010) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_procfs(r4, &(0x7f00000000c0)='fd/3\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r8}}) 13m29.956008104s ago: executing program 1 (id=3621): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x4010, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206030000000000fffff000000000000900020073797a32000000000500040000000000050005000200000012000300686173683a6e65742c706f727400000005000100070000000c000780080006"], 0x58}}, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x30a, 0x5, 0xff, 0x8, 0x1d, @local}, 0x10) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) openat$ipvs(0xffffffffffffff9c, &(0x7f000000ac40)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x8918, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) fcntl$addseals(r6, 0x409, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 13m29.688713006s ago: executing program 1 (id=3622): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0xe, 0x180000) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000102c0)=@deltfilter={0x930, 0x2d, 0x20, 0x70bd0d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x1d9ba4b37f621188, 0xfff3}, {0x1, 0xa}}, [@f_tcindex={{0xc}, {0x4c, 0x2, [@TCA_TCINDEX_SHIFT={0x8}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_ACT={0x38, 0x7, [@m_ctinfo={0x34, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0x5, 0x6, "f5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @f_tcindex={{0xc}, {0x894, 0x2, [@TCA_TCINDEX_POLICE={0x890, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0xb, 0x6, 0x80000000, {0x49, 0x1, 0x1, 0x5, 0xef0, 0x7}, {0x2, 0x2, 0xff8e, 0x9, 0x4a43, 0xe}, 0x127, 0x0, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0xc9d, 0x10, 0x1, 0x1, 0xfffffff8, 0xd309, 0x5a51, 0x0, 0xceda, 0x9, 0x4, 0x5, 0x200, 0x0, 0xfffffffa, 0x2, 0x200, 0xfff, 0x80000000, 0x8, 0x2, 0x40, 0x8, 0x200, 0x0, 0x8000, 0x6, 0x4, 0x3ff, 0x1, 0x80000000, 0x2, 0x1, 0x9, 0x3, 0x20000000, 0x0, 0x400, 0x8, 0x7, 0x3ff, 0x7ff, 0x27, 0x6, 0x1, 0x401, 0x8, 0x6c964abe, 0x9, 0xfffffffd, 0x101, 0x0, 0x81, 0x62, 0x800, 0x400, 0xd64, 0x1, 0xffffff53, 0x4, 0xc0000000, 0x2, 0x1, 0x9, 0x5, 0x4, 0x100, 0x1, 0x7ff, 0x3, 0x8, 0x699f, 0x427b97fe, 0x3, 0xca6, 0x7d, 0x101, 0x7, 0x8, 0x6a2, 0x8, 0x80000001, 0x3, 0x9, 0xfffffffe, 0x54, 0x3, 0x7b9c, 0x401, 0x1, 0xffff, 0xd1, 0x2, 0x9e, 0x8, 0x2, 0x7fff, 0xb, 0xff, 0x4, 0x4f, 0x8608, 0x8, 0x40, 0x8000, 0x3, 0x8, 0x3, 0x88, 0x6, 0x1, 0xc24f, 0x2, 0xff, 0x800, 0x2, 0xffdffffe, 0x100, 0xffff1f2f, 0x4, 0x7, 0x7, 0x3, 0x8, 0x3d, 0x7ff, 0x4, 0x200007, 0xfffffffb, 0x2, 0x2, 0x9, 0x445f, 0x0, 0x8, 0xe564, 0x8, 0x4, 0x1, 0x6, 0x5, 0x1, 0xa2, 0x101, 0x2, 0x7fffffff, 0x1, 0x1, 0x8, 0x10001, 0xd91, 0x9, 0x4, 0x4, 0x7, 0x800, 0x410a, 0xf, 0xcbf, 0x4, 0x8, 0x3, 0x6, 0x1, 0x3, 0x2000000, 0x3, 0x6, 0x9, 0x1, 0xe03, 0x9, 0x2, 0x3, 0x8c4f, 0x7fff, 0x3, 0xffffffff, 0xff, 0x1, 0x757, 0x7, 0x101, 0x2, 0x2, 0x2, 0x8, 0x4, 0x7, 0xb32, 0x6, 0x4, 0x6, 0x7, 0x7ff, 0x0, 0x7c, 0x80000000, 0x9, 0xffffffc0, 0x6, 0x8, 0x1, 0x7, 0x26, 0x3, 0x4, 0x3, 0x5, 0x9, 0x400, 0x59f, 0x1000, 0x9, 0x1, 0x3, 0x5, 0x5, 0x0, 0x6, 0x65, 0x100, 0x1, 0x10001, 0x8, 0x9, 0x6, 0x1, 0x17, 0x7, 0x9, 0x9, 0x6, 0x2c2, 0x200, 0x2, 0x3, 0x10001, 0x5, 0xd61, 0x6, 0x8, 0x10000, 0x8, 0x5, 0x9, 0x860, 0x8, 0x3, 0x6, 0x1, 0xfffffffe, 0x19, 0x6, 0x7fff, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x44, 0xffffffffffffffff, 0x7, 0xfffffff7, 0x8443, {0x8, 0x1, 0x10a6, 0x4, 0x8, 0xd}, {0x5, 0x1, 0x40, 0x8, 0x8, 0xd}, 0x2, 0x3, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x7fffffff, 0x1ff, 0x7, 0x0, 0x0, 0x7e, 0x1, 0x6, 0x2, 0xc4, 0x2, 0x0, 0x0, 0x9, 0x8, 0xc, 0x4, 0x6, 0x8, 0x6, 0x5, 0x9, 0x7fff, 0x6, 0x0, 0xfffff000, 0x7, 0x10000, 0x5, 0xc, 0xb, 0x84, 0x9, 0xb, 0x5, 0x5, 0x2, 0x1e45, 0x5, 0x1000, 0x7, 0x4, 0x1, 0x9, 0xfffffffe, 0x6, 0x3, 0xfff, 0xac94, 0xff, 0x8000, 0x4, 0xf0e6, 0x4, 0x8, 0x7f, 0x867, 0x2, 0x1000, 0xfffffff6, 0x3, 0x2, 0x3, 0x952, 0x5, 0x1, 0x9, 0x3, 0x7, 0x2, 0x6, 0xffffffff, 0x4, 0x4b, 0x7ff, 0x9, 0x87, 0x7f, 0x7, 0xfffffff9, 0x9, 0x3, 0x6, 0x8, 0x52, 0x453b3ca8, 0xff32, 0x6, 0xfd2, 0x7, 0x3, 0x9, 0x8, 0x401, 0x8, 0x800, 0x80000000, 0x3, 0xa, 0x9, 0x3, 0x300000, 0x2, 0x9, 0x7ca, 0x10001, 0x7e0c, 0x28b, 0xfffffff2, 0x8, 0x4, 0x0, 0x1, 0x1000, 0x7, 0x7, 0x40, 0x1, 0x0, 0x660c72c1, 0xffffffc0, 0x7060, 0x200009, 0x0, 0x5404, 0x80000005, 0x9, 0x5, 0x5, 0x5, 0x1, 0xb, 0x7fffffff, 0x3, 0x6, 0x5, 0x9, 0x2, 0x5, 0x1, 0x1, 0x2, 0x7fffffff, 0xfffffff8, 0x75792ce, 0x7f, 0xfffffff9, 0x5, 0x3, 0x10000, 0x3, 0xb35f, 0x1, 0x4, 0x50094766, 0x0, 0x7, 0x54b, 0x80, 0x2a0d8c55, 0x5, 0x3ff, 0x1000, 0x1a16, 0x10000, 0x2, 0x9, 0x3ff, 0x5, 0x3, 0x6, 0x5, 0x1, 0x86, 0x2, 0x1, 0x1ff, 0x5, 0x2, 0x7af, 0xca, 0x8, 0x3ff, 0x2, 0xca, 0xe, 0x4, 0x6, 0x3, 0xffffffff, 0x321, 0x1ff, 0x9, 0x8000000, 0xfffffffd, 0xff, 0x4, 0x7, 0x9, 0xb, 0x0, 0x2, 0x101, 0xe, 0x5988, 0x1, 0x0, 0x6, 0xfe, 0x2, 0x7, 0x1, 0x9, 0x0, 0xffffffc0, 0x1, 0x200, 0x8a7, 0x3, 0x1, 0x401, 0x0, 0x183, 0x80000001, 0x3, 0x8, 0xfffffacf, 0x6, 0x80, 0x4, 0x100, 0x7, 0xe, 0x3, 0x8, 0x5f6, 0x4, 0x1b2, 0x4, 0x8, 0x7, 0xcd7a, 0x95, 0x6, 0x10, 0x200, 0x80000000, 0xe655, 0x5, 0x8, 0x9, 0x1ff, 0x8, 0x5]}]}]}}, @f_rsvp6={{0xa}, {0x8, 0x2, [@TCA_RSVP_ACT={0x4}]}}]}, 0x930}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) recvmmsg$unix(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)=""/37, 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)=""/248, 0xf8}, {&(0x7f0000000a40)=""/217, 0xd9}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000041c0)=""/4096, 0x1000}], 0x4}}], 0x3, 0x2000, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) acct(0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000540)=0xc) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="540000cdb2fd5272d83c34e34c1f1b5b7cf300", @ANYRES16=r9, @ANYBLOB="0100fdfeffff00000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f0009000000000000000c0090000200000000000000"], 0x54}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000001680), 0xffffffffffffffff, 0x2040) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 13m28.608803919s ago: executing program 1 (id=3633): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', @random="142b243c16b6"}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', @broadcast}) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="310b2c727000ffeddf2506", @ANYRESDEC=r3], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000000100)=[{&(0x7f00000003c0)="480000001400190d7ebdeb75fd0d8c562c84d8c033edca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff000000030999ea01aa7753c5497b9849e3135c29e8", 0x48}], 0x1) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x2b, 0xb, 0x70bd2a, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20080c40) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb1da9ac0ba20c8d, &(0x7f0000000180)={0x9, &(0x7f0000000080)=[{0x447, 0xc, 0xa0, 0x5}, {0x9, 0x7, 0x2, 0x2}, {0x2, 0x2, 0x6, 0x7fff}, {0x4, 0x2, 0x3, 0x88}, {0x4, 0x8a, 0x73, 0x251}, {0x401, 0xff, 0x5, 0xa}, {0xdc5, 0x90, 0xd6, 0x8}, {0x0, 0x3, 0xb, 0x4}, {0x101, 0x8, 0x1, 0x2000}]}) 13m28.549235115s ago: executing program 1 (id=3635): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe301, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xd4}], 0x1, 0xffefffbb, 0x1005) 13m28.502078361s ago: executing program 1 (id=3636): mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='hpfs\x00', 0x1800d2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x8000, 0x156) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregs(0xe, r1, 0x4, &(0x7f0000002080)=""/4096) mkdirat(r0, &(0x7f0000000140)='./cgroup\x00', 0x93) 13m28.040666346s ago: executing program 1 (id=3641): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x20, 0x31, 0xf, "fee509f042a0acf1e551534bea3f6a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r0, 0x7, 0x1ff, 0x1) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 13m27.800114272s ago: executing program 45 (id=3641): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x20, 0x31, 0xf, "fee509f042a0acf1e551534bea3f6a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r0, 0x7, 0x1ff, 0x1) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 12m38.432368835s ago: executing program 9 (id=3981): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000080)={0xc7, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x2000) fcntl$setsig(r0, 0xa, 0x1c) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r5, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x22052, r5, 0xa471a000) 12m38.274013059s ago: executing program 9 (id=3982): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mkdir(&(0x7f0000002740)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f0000004300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) llistxattr(&(0x7f0000000680)='./file0\x00', 0x0, 0x63) (async) close_range(r2, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, &(0x7f0000000080)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETS(r6, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000042e6e33ceed6a62ba5e59141e7b986fa1c758f2dd9ce48adca0dc1b9cc795baea54d84fea3e4d03d572a41acf24447a346747bf366b87c242febc78bce2ffa3118981982d787f8512f560af2f39a1941dbd6355df187d33d", @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00080000000600110006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 12m38.202697746s ago: executing program 9 (id=3984): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000002c0)={0x0, "c82bf59ac78c16b4ff99af4b1de7092cd7c684a0132f9d50aa5f41f356e186e5", 0x7, 0x200, 0x3, 0x10000, 0x10, 0x2, 0x1, 0xd}) r3 = socket(0x10, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r4 = socket$netlink(0x10, 0x3, 0x6) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000140)) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="20fb7f776079933fb8a205a0ba7b3a11", 0x10) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100)) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) (async) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000002c0)={0x0, "c82bf59ac78c16b4ff99af4b1de7092cd7c684a0132f9d50aa5f41f356e186e5", 0x7, 0x200, 0x3, 0x10000, 0x10, 0x2, 0x1, 0xd}) (async) socket(0x10, 0x5, 0x0) (async) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) socket$netlink(0x10, 0x3, 0x6) (async) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000140)) (async) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) (async) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="20fb7f776079933fb8a205a0ba7b3a11", 0x10) (async) 12m38.153576922s ago: executing program 9 (id=3986): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000000)={0x2a, 0x6, 0x0, {0x5, 0x0, 0x1, 0x0, '-'}}, 0x2a) ioctl$int_in(r3, 0x5452, &(0x7f00000013c0)=0xc7f) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="dc010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d42b000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001c96000000000000000480001"], 0x1dc}}, 0x0) recvmmsg(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/88, 0x58}], 0x1}, 0x7}], 0x1, 0x40000021, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000280)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x2400c884}, 0x40000) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) sendfile(r1, r0, 0x0, 0x7ffff000) 12m36.639419671s ago: executing program 9 (id=3995): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x5778b000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000551000/0x400000)=nil) 12m36.555738237s ago: executing program 9 (id=3997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000090a010400000000000000000a0000020900010073797a3100000000080005400000001d0900020073797a31e1ff000008000a4000000000080003400000001408000c40008000031400000011000100"], 0x74}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close(r2) (async) close(r2) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r3, &(0x7f0000000000)='\"', 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f00000002c0)=0x1e) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {0xbb2494312bf183ee, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xbfb37d8aa47ca1cb}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {0xbb2494312bf183ee, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xbfb37d8aa47ca1cb}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0xb) (async) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0xb) mount(&(0x7f00000001c0)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='nsfs\x00', 0x200000, 0x0) (async) mount(&(0x7f00000001c0)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='nsfs\x00', 0x200000, 0x0) 12m20.372137272s ago: executing program 46 (id=3997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000090a010400000000000000000a0000020900010073797a3100000000080005400000001d0900020073797a31e1ff000008000a4000000000080003400000001408000c40008000031400000011000100"], 0x74}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close(r2) (async) close(r2) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r3, &(0x7f0000000000)='\"', 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f00000002c0)=0x1e) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {0xbb2494312bf183ee, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xbfb37d8aa47ca1cb}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {0xbb2494312bf183ee, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xbfb37d8aa47ca1cb}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0xb) (async) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0xb) mount(&(0x7f00000001c0)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='nsfs\x00', 0x200000, 0x0) (async) mount(&(0x7f00000001c0)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='nsfs\x00', 0x200000, 0x0) 10m1.096617631s ago: executing program 3 (id=5253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/disk', 0xa0000, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb00002b700000785d9600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be5ee68c480000000000000000000000000000101300001f92a73800", [0x0, 0xfffffffffffffff8]}}) pidfd_send_signal(r2, 0x1, 0x0, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000040)='\x81', 0x1) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="00030300010000000000400a10200068000005069078ac1e0101ac141422072327ac1e0001e0000001ac1414bbac1e0101ac1414bbac1e01010a01010100000000070fbbac14140ce0000001000000008637000000000006fcf087ad020d9b6ba48dbc0b543fb4820b02100298f892ab7e0f9d6a1fa59f5ee9010e29e3fc5df6d876329193a4250000004e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x102a) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b29090955f70e0dd038e7ff7fc6e5539b324c078b089b34393b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d306d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c00000000b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f2439448d274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa88af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc52d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb268ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) chroot(&(0x7f00000000c0)='./cgroup\x00') 10m0.895596308s ago: executing program 3 (id=5255): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r1, 0xebe3b000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0xc5, 0x8, "f834590be995115a1ad0932d62ef1abab7909f5c7ab8cf0835c282717a179a2d8c7b6fa28908d4a48569c29f40fc2af6323c80907ed7a5c05ff4608c79ca2e1a16fb9e72d53197486d6d81752e025ac31e1ec447da6ed2e010f6050a539974b2002f09626036c88a59aad9fe41eba9d775ea2f1b0bd00f7e926c64e5a047d11f66e85dee833aa6b9c8c4e9ffcee683613aa031c66379e286c3f34dfc94dd108ed8c90ffb121faf37bb2fc25f714cf68f17d97df2230169585eafd64558e19c242d"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000180)={0x3}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r4, 0x0, 0x0, 0x80800) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 64) 10m0.804402569s ago: executing program 3 (id=5257): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000002940)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000280)=0x2) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfa}], 0x1) 10m0.621707834s ago: executing program 3 (id=5259): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2600, 0x0) r1 = getpid() prlimit64(r1, 0x4, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=')\x00', 0x2}], 0x1) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="000202"], 0x18) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendfile(r2, r2, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2600, 0x0) (async) getpid() (async) prlimit64(r1, 0x4, &(0x7f0000000180)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=')\x00', 0x2}], 0x1) (async) socket$inet6(0xa, 0x3, 0xff) (async) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="000202"], 0x18) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) (async) sendfile(r2, r2, 0x0, 0x7ffff000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) 10m0.461954803s ago: executing program 3 (id=5260): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) mmap(&(0x7f000008b000/0x4000)=nil, 0x4000, 0x59327139ae2673af, 0x12, r1, 0x57789000) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x3010, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\xd1Xj\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) 10m0.367486916s ago: executing program 3 (id=5262): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x59327139ae2673af, 0x12, r0, 0x57789000) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') openat$rdma_cm(0xffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r3, 0xffff) (async) fcntl$addseals(r3, 0x409, 0x7) (async) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086203, &(0x7f0000000200)=0x4) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3c) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f00008e2000/0x400000)=nil) 9m44.12957077s ago: executing program 47 (id=5262): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x59327139ae2673af, 0x12, r0, 0x57789000) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') openat$rdma_cm(0xffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r3, 0xffff) (async) fcntl$addseals(r3, 0x409, 0x7) (async) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086203, &(0x7f0000000200)=0x4) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3c) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f00008e2000/0x400000)=nil) 9m7.200349906s ago: executing program 0 (id=5624): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffc97, &(0x7f00000001c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x86) (async) fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x86) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x0, {0x5, 0x34, 0xb, 0x1c0}}) mount(&(0x7f0000000180)=@md0, &(0x7f0000001440)='./file0\x00', &(0x7f00000000c0)='sockfs\x00', 0x200003, 0x0) (async) mount(&(0x7f0000000180)=@md0, &(0x7f0000001440)='./file0\x00', &(0x7f00000000c0)='sockfs\x00', 0x200003, 0x0) 9m7.130586944s ago: executing program 0 (id=5626): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async, rerun: 32) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) (async, rerun: 32) fcntl$setown(r0, 0x8, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 9m6.716782767s ago: executing program 0 (id=5628): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0xffffe000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0xffffe000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x220001d, 0x1a, 0x3, &(0x7f0000000ec0)}) 9m6.663384051s ago: executing program 0 (id=5629): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x1004040, 0x0) chroot(&(0x7f0000000180)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00') r1 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendto$inet_nvme_pdu(r3, &(0x7f0000000140)=@data_c2h={{0x7, 0x0, 0x18, 0x1, 0x4}, 0x7ff, 0x3, 0x8, 0x1ff, "959994bb"}, 0x80, 0x0, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0x80084121, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) 9m6.189941356s ago: executing program 0 (id=5632): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0'}, 0xb) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x55}, 0x2c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x95a1355daab61746, 0x81, 0x12}, {@rand_addr=0xae1414ad, 0x4e23, 0x10000, 0x1cb, 0x12d5e, 0x7}}, 0x44) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e26, 0x100000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000000c0)=' }', 0x2}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x10, 0x9, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="c1", 0x1}], 0x1}}], 0x2, 0x200400c0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x2, 0x12d5c, 0x12d5c}}, 0x44) madvise(&(0x7f00005d0000/0x1000)=nil, 0x1000, 0xf) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m5.880687963s ago: executing program 0 (id=5634): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r0, 0x34d1400000, 0xf, 0x4) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0xc0000000, 0x1}) 9m5.628763686s ago: executing program 48 (id=5634): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r0, 0x34d1400000, 0xf, 0x4) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0xc0000000, 0x1}) 7m21.977068205s ago: executing program 8 (id=6138): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000180)=0x9, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r3 = socket$isdn_base(0x22, 0x2, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$IMGETCOUNT(r3, 0x80044944, 0xfffffffffffffffe) sendfile(r2, r0, 0x0, 0x7fffefff) fadvise64(r0, 0x9, 0x9, 0x2) sendfile(r0, r0, 0x0, 0x7ffff000) 7m20.953329909s ago: executing program 8 (id=6141): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e52000) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r1 = socket(0x10, 0x3, 0x0) setresgid(0x0, 0x0, 0xee01) r2 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r2, 0x9, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001900010000000000000000001c"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x804) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0xd04, r3, 0x80000}) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000100), 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m20.797442073s ago: executing program 8 (id=6143): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x4e6de000) (async) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x3938700}}, 0x0) readv(r1, &(0x7f0000000200)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) 7m20.48861438s ago: executing program 8 (id=6145): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1) (async) fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 7m20.420810974s ago: executing program 8 (id=6146): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x34d742, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x108) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r1, &(0x7f0000000200), r2, 0x0, 0x808, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000080)=0xfde5) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) sigaltstack(&(0x7f0000000340)={0x0, 0x1, 0xfffffffffffffe63}, 0x0) sigaltstack(&(0x7f00000006c0)={0x0, 0x2}, 0x0) (async) sendfile(r3, r0, &(0x7f0000000000)=0x7ffffffa, 0x80000010) 7m19.933691277s ago: executing program 8 (id=6147): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1ea) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r0, 0x0, 0x1, 0x0, 0x0, 0x2ef930, 0x8ebd7}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1ea) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r0, 0x0, 0x1, 0x0, 0x0, 0x2ef930, 0x8ebd7}) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) (async) 7m19.772273813s ago: executing program 49 (id=6147): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1ea) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r0, 0x0, 0x1, 0x0, 0x0, 0x2ef930, 0x8ebd7}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1ea) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r0, 0x0, 0x1, 0x0, 0x0, 0x2ef930, 0x8ebd7}) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) (async) 3.798809924s ago: executing program 6 (id=8773): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}, {}, 0x1ff, 0xb}) syz_open_procfs$pagemap(r1, &(0x7f0000000040)) 2.744630395s ago: executing program 6 (id=8778): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x14000, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119edabebbb1, 0x20011, r0, 0xd56d9000) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000000)={[0xe6f48000, 0x4000, 0xeeee0000, 0x4000], 0x7, 0x0, 0x6}) 2.682048291s ago: executing program 6 (id=8779): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffff33}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x59327139ae2673af, 0x12, r0, 0x57789000) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.570165923s ago: executing program 6 (id=8780): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="200556010000b0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r1, 0x7, 0x1ff, 0x1) sendfile(r1, r1, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYRES16=r3, @ANYRES8=r2], 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) 1.631648749s ago: executing program 4 (id=8793): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000004200)='/sys/power/sync_on_suspend', 0x40082, 0x14c) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000004280)={0x32, 0x4, 0x0, {0x5, 0x10, 0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x32) sendfile(r1, r1, 0x0, 0xf0) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000004200)='/sys/power/sync_on_suspend', 0x40082, 0x14c) (async) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000004280)={0x32, 0x4, 0x0, {0x5, 0x10, 0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x32) (async) sendfile(r1, r1, 0x0, 0xf0) (async) 1.424579496s ago: executing program 4 (id=8798): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket$inet6(0xa, 0x1, 0x0) (async) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x903, 0x0, 0xffffff80}}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="fb388bbf49f635c3e779bdcbdfec83eeb5fe1652f89ee32e38951547ebf25dd40e87b11a53d9022a12facdf9cefaa3c19b4464df591f45068e25ae", @ANYRES16=r5, @ANYBLOB="02002bbd7000ffdbdf251f000000050092001400000008009a00000000000400cc000400cc00050092000200000005009200080000000400cc00"], 0x40}, 0x1, 0x0, 0x0, 0x20040041}, 0x884) (async) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="fb388bbf49f635c3e779bdcbdfec83eeb5fe1652f89ee32e38951547ebf25dd40e87b11a53d9022a12facdf9cefaa3c19b4464df591f45068e25ae", @ANYRES16=r5, @ANYBLOB="02002bbd7000ffdbdf251f000000050092001400000008009a00000000000400cc000400cc00050092000200000005009200080000000400cc00"], 0x40}, 0x1, 0x0, 0x0, 0x20040041}, 0x884) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) (async) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 1.280570646s ago: executing program 7 (id=8801): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) 1.215597884s ago: executing program 7 (id=8803): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r5, 0x5708e000) 1.058989039s ago: executing program 4 (id=8807): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000005240)='/dev/comedi3\x00', 0x400002, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000600)={'aio_iiro_16\x00', [0x4f27, 0x6, 0x2, 0x10, 0x5, 0x0, 0x8, 0x6bb0, 0xe, 0x8, 0x7, 0x1, 0x1, 0x20001, 0x6, 0x10001, 0x2, 0x1, 0x3, 0x40000003, 0x8d, 0xcaa7, 0x0, 0xffffffff, 0xb, 0x3, 0x3c, 0xc, 0x10000006, 0x0, 0xfffffff8]}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x62da82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000051c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r1, @ANYRESHEX, @ANYRESOCT=r2, @ANYRESHEX=r0], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000005140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x75, 0x48}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}}, 0x4004840) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x60, 0x2}, @const={0x3, {0x1, 0xf801, 0x4, 0x1}}}) write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010802000000030000008ed7000008000300", @ANYRES32=r10], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x4d88, r3, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x380, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x378, 0xe, 0x0, 0x1, [{0x81, 0x0, "4884c905c175b6e9ffe5cd247365eeed5bd7afd36192d35786b00903fc5d73df475826b52b6f536ebd136e1cba7699012171106a05d0e3e217d290926edff5187a12213c762dc85a79b04eb0202c36bbc45b9ebac6fb447e9315f4b01c6cfe431e673621055a77867f08a6e81df04ef18f95f52f7bdbd436a8cf6a0a06"}, {0x9c, 0x0, "1780a2bd7ae0c5505389ca83680149fc4972549d97909c716591693a20f75330907bcd40fbe8060eb8923c1e05810b0851000adc86c7b5d6f053f3c673446eb238c51ef3b718800ab04926c0183055484a79a43c280c895cb110782b7b983f16c5a3886a0d040afdd7dc101912d4e71f1dae6f58968174b4b8d55a9fcf7b20065132539faad11f53088cc13babde2f40ac2ca83fff291954"}, {0xee, 0x0, "ebf7f3a973f5a5a8dd3225a5ca99df91e43f9148e839f18b3f0328923c36490ac6846ce1925ef70ca92e519f7fa631acfad61a36ba2de0ef99181d1ef942652fe64333d767992724178fe05c8ee9a13c0ea186ecb1a1ae9cc67617d67dbf4e7cdb3462762cfaa65190b97c398e7f74535e2e30f353e2f8e381769c4cd156f549e3f182155c179bf19650ee72309c51168d42415ccbdc59bedc3c004ff9330237a9dcbd2a09e9e44d1ef0ae7f55ab36aac266736c59dbaaa2a2833a8906e69652c1fbcc69740b198ae411bda6c53d77dd8c2928a084601e2806c389c1f129965adb7ac34c23789d052360"}, {0x73, 0x0, "a9ffb1764ac0bcfcabfea1e67c932669b59b0506904a59982b5d476beb2b10c1cba5de839bc4c916a27e2ffd683d9f4ae85528f9d1a91f5e39b2b090bc907ea4ffbc64c8683eab28095528da07fcb58faef47ea020f730e3c9ee7fe542925f31538bbdf30638f96d7eaac798e458eb"}, {0xcc, 0x0, "3c1821f51c59dae53390f459509e4c44cc7bfdde886963490ea76d748cce70506d6a80ab525c32c54d6dfd8db10e3f903ddc585b1985ac449f8f9c9a9435f57862622654df3ee5e2e96ce982f3c73ed1eca5e5bd1af6ee5ab885e6ba2dc95b7df40e17558a68f2d6c3538a4e989bbe443fbd11a3aa2656764e0f005d6e31bdb9a46dc45b062e147c1bfd102e1766e4cbc45700fe65bafa51a25e3a52b318b2e93c69b373142c08512fa3533e990ae44f7f348781a5b4b9f97b64568c590abba427232ed71aac7b07"}, {0x23, 0x0, "d07445a84002b5dfae66686517304d1f20c2b5fabcde56f928a83067c83861"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x44, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x80}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3420816c2169"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xf7}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x40}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x7b8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x10}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "c21b5656bb5f"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x484, 0xd, 0x0, 0x1, [{0xb9, 0x0, "fee64b364dd37327e837fa3a185cfa4fd1d707fad701043fa81a49d432891ed3a15658033afa15c9a7eb6117ebb172198581c68337422e63764f0047d8f4230ed5ad3b4e1d556879a64e95e514198c1e4317135615986692581539a60094d74ec38b4e1166b7715fbfb9db341883335c29874156ddde363df9030eb18d9993c06820de07d940fdd1dc4486d94dd1960c75b6b88a549b0f25c38d31edfd73e4c6752561628c544e2fbd7594d0effbce1a2a3012801f"}, {0x5, 0x0, "c8"}, {0xea, 0x0, "58d0d4435ee4b03efd9f0ed9bb839d736d82527c60af92c2fe7f45860eec03099d3b7f145ec350bce31dc126b931e7484ff143812639414961bee5b25d0ffef8f94af92c1cf53b8a4c54020b04aa6cf530fcc5d4a0b01d82cf55ac860888ac68b951825a570ac651aca6a8fae2711a5bb0f9b27288e63fb4584385f64ce029d57cabd6a6c21d2418d060d1f30e17c510b3ba6a55450cb021ff8d08c2af7097802c5b6d9dbe086f2ae5e264d141bed9170bd52ff837bd2ec06fc0174a65d53dd8c9ede24885f25b523a0932261871655818691f43c2d3919f2f16973af2ffbad375292acdb65d"}, {0xd0, 0x0, "cbf8e1c264fbfca70717464eca931301eedbab9ff53e59072d2d9b8088b001b3e7f046af62275a85b4f2c54d16552ded2df97e39982f4bd84ca509e0f98a36e0b3644316cfd2d56b8cf7a155b48fe867dd7138974e452d928e31f6a6a3c6993b277273beaf6d03f72d4c9d625cf4265422e00fd84320a3064c8b5bb3e637a76f1ae9f12fb70304c1c7c5d15b84e17fd41cef24871232b375241beeef123c891d2e2c07c153d9f7fef1b828b8339959f9c7201ea9bf68583455459ec24800"/204}, {0x9a, 0x0, "5b60927a6e64d969f24d87d5abd1d702fbd8efc25990711a8bb456d1a23b510a1a3c7f3b0653b83c992b4c38edc4fbac547e1dfeea89803f651def455402bdcc5fd02f86ef490d0ebe88a60d846f4819710e07c87d80b0e40c64d8798bbfb340818407188206615ff4ef962a5bdc073afe908aaf4ee7d52ce8b42ea487bc24dd2748098bf53437f8e146d0132924b956d84053c27e58"}, {0x32, 0x0, "50a58fb90d912c59167f41475612fddc5ffb020010a67e8245c5732066fc1d1db2657c2e7d06edfbcdf383191f8b"}, {0xa6, 0x0, "a68d4dd76dd60375349c5e5c3750d0223b7a3e2bffbb9ed2b88ae638a224d9c397cbd9882dfcc0bcd29169453a02ee057fcfa9cb1278bada8ead4f6514f4bdee2a990775bc427320d761503201e01831c723e225ad6b6e30363337b0cc2632732e6021e04c32f671a8fd48494c4bc5f587aa1cebff4a5958273e48d448d527b9d4ff8b39e73b5b1e4145cbec4916cd9bb9adefaee6d1b65fc935d768b61383bee5cb"}, {0x85, 0x0, "a1492333868ec540f216fa39b96300d978b48c8ad5f3f7bb53871cbfeaac04889c3b4e3e2f1163272a1294017836921b8685da4e8867df515976aa54408f817005f5391c6013328de830fa8edf16b1919ebfc56fdc17a8e8462f93c11dbccda25e1010c0e0ca1d27098017c5e426b2049603669304fffee90b4aaeedfcda6dbf95"}]}, @NL80211_NAN_FUNC_SRF={0x314, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x70, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x41f0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x468, 0xd, 0x0, 0x1, [{0x9a, 0x0, "94007eedeca30f41111188b73b97abd020c145779992db7f552051fed9c9d528ca0143c36dcaa816e3afce42a313a3cb3c208d31eb6f344e895a7b85d77c00f0ee1492b443182e330307019009b3a13da4c197679ccf97b790b512d416d1b1251dc7f937007a5fffc78b64d8196b1241be8e9623cabf96a140ab98fb7dc9757b5155c58f6abafd8545cc9cf8d0e7fa72a6f0fa29013b"}, {0x100, 0x0, "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"}, {0xfd, 0x0, "e1be016250f4e24fa66fd1a02404eddfb5d2362014ca4bbfbd68e01d48c167584318aaa5e77aa80206847ca4f2176ba7a398af30b5ed69a1e0cecb320ae810492ec508b25e57d4f7f1732434ae6d6fa8369965863ebf0f801001139337bb46411a503fb7d9d613b00606f421dfde965fc0bbb5a7166da9b2ec371d7686ca10c71c39a84f199efbe1c0483e4c10b8058ce01d1ebd44d890f9cbb7b912c181cdcc8fd100810e59ab7f33d4d39a92c5346a747091a23fcea1250271e5c8068acf5d3fedc17519c2f7385df020f6c42ecc2953925274742acdf32b310d74f90a5e0887ca12c67f2470103bc5385a1afe954bacaf6e832be2cd7c47"}, {0xd2, 0x0, "4b5361db7a3365c2d68e772f5536d0e8fa66ad83fca624e75b7e1e3e27625636d804b067f754e70e014b391c67a7a8ad9a80c4565968337d9d73c19d25bc4f8a13e971181400857a7dd45bdd5410ffa7e1e0302937afa25880d53255a53bf9aae2b80f255ef2a9685b0e6c132b80852e2dd13ffd0c28d34449ea8b03f9073f1964c5456d0ffdcfaeda6247e7c93c40028dc8c244697e9c73adda523d1e8e4f1caa8a671e87342568db5ce14d595d261d5f072ddc8a6f02a6b762eddb9306dd53ebf688fad9a4966269d8bdf8ba79"}, {0xf4, 0x0, "03da570e94d3fc1580d20ccd3276f5ca3f4c55a2925d6fa243b608f891b302feb1c8b10718409911394876ec924db2220b32ab58a822041e0af229890534b27e42f4be3db17cb86d5ce2fb4bbea5e1e80136e1fc7e80b10c3d17e0c185f4cdedace5d8008a7f1f6cb08697fb5145a6230a61ae04c455ba33bab87882cb6fee73b6694422d0d87df68fa63b7a5ca0c39f318c88a385a7274504f5c93fe789988a464573bcf42718764d317441ec8770e9e9a3f3a27b46506f07a7eb1fabc1085ef49ec4eb394fba301219d325514bbc8dcbf6c7d6706a9f4d7672ccfcbfc4e124cca5c5f335e9eb5ef4e091186d5f7957"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x5c8, 0xd, 0x0, 0x1, [{0x101, 0x0, "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"}, {0xc4, 0x0, "463e9f77649567a78f00e2c162e93d8c4a39f819c03b719eeca25d3dd917af43d1efb9d90d18ef66a4e4c8d162e21cff6f5d27749a1c23f9098f6c7680b97c96e9cd8b205e6e357dc115845001ebb12f261884bcfc5844d4e3d18b1d307ce9272cc353767a98c5a25531fe5a7b9a20d9a00db138c08f193d693914ef9823aaa29e218b2d61b17a7d3e0aacf42d1bf733e244bffd883de635b3d55ea8fe6bc7357b7f9d12bdac277f82b2cbac8f481134c956aa4f7c7dd42ff0b111047d4c27d1"}, {0xe9, 0x0, "5b9ab701ddac10bb74f02b6682915728f1569bc6fa22c2a60e47c3e62108e889b717f418e6033b3ec09d741bc9d1ad714d1f1ec77e8ca1eabcf253007602194bf67b425567baa230fdb65247b628891a5738e3eee06fea684e09e84d5297ecb78527aaeea6d36f57ad3c018e8e7c85d0d5ee60d143323e432ededbc35081f419601058e2f5ee615711d2eaf56325f8b4c2b54bd47f7e664e74d026e1d2c9c25dec6a84ea3ae2658c71c0101fc067edc96d8ecf17e97552275e5ff299f6219a3651be4cc99260704511ad7100e2f68a6038bc2d15b37890c809561930a36672aaf9b7df03d8"}, {0x24, 0x0, "2097ee1fddcacb2e5c695c5b58ff3672281cc1cbe4c627899da19c932bb68f38"}, {0xdd, 0x0, "594b590b52bcc2511b5c0a81c758d724e5b58228db64066400d55514e2b7eaf6d158bd115268944f00b5e41237690f6d8522bd1e228ee4f80737bc0b3e3a7684b478783982b69b98970a1f93c0937d6bdbf1c877d2f5cd05af60c53c7d80720ae1dbc590b79a3e5892702842330973410069f545a76e3825f1afa5bc53975604b3688e5f9c38f477d6bdd1182894db898d1c6a454cb740e1508b001a60d9eb8afecf8b57264778bc7c3cb49200d8997505b9d432b4dfbad835445dce50c06bbcb7594bc7dc3508e129c1a7973e8b0254f995b67d429a03797c"}, {0xb9, 0x0, "5f63cbeece9bb18ef67bdf641f4ce3eb6599768f6e838e68b7d6f220101236cefa8c74e065f3d6b58c2c4f6131d769eb9ce08bd3c99716feb0f06d1290ecc687555f61cbea36fd3a0c05cfc70ad09480caa8a2f9d740c41d15239711eaad69e1b98ceb5952aecf339261452f08b0f117205ce04e3079162fc7570d8835851551eba65d328c8f72f4b87413f623ab5e8568fcc1f9cfdd77bad57d1830e5440c04b6e58f1f87bcc4330f22e2e402a53355b1a2fb2eab"}, {0x28, 0x0, "758c1019cf511df6e1c6ff5825bca2a92f59744e6cf8c6a310257979fdfab7cf69b83d42"}, {0x4e, 0x0, "f31aa576e61efe06131f211ed1b4851cc8b22dbdca9760f2fbac9cfb6383b716afe18afcc10051ed4da01a4ffb78bd503573b9d593f482eda0753e0d4bd82f07045f856c04bbde345112"}, {0x34, 0x0, "dd332d2e853725d13dfdd232b95f76fd184700de4a8e8f78f9c32cc0902df9005919aaee0e489d87fcefe8a2bfb35e94"}, {0xa1, 0x0, "1f76155a093a066f34c680b474f7f34b635f48f17d76682070f179a7395a8335d981e2b3170afddeed75d05be05b68f47858b84a680b0562487c3a547f0b22460b0ad533fd431cad1c723b074c3eaa4aa92c17599fef41dfaada651b73672e9a62ee732e941fd0ad4dbcf9e7aa3ed24ef3c15109f496f2cedf02a87fd5b630133c524a3f91fb714c94be5ed34039c114ae0c10aeacd072b975d667edab"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x478, 0xd, 0x0, 0x1, [{0xd9, 0x0, "30d7ec11d381f42d423da250ddee6700f43a85768cdb8d99004d4f70bfa1337517a7c1dee8db37136527dcf022922062697314208a28fa09648e184f93e59410bebcb36f92cec543784e070bf331415d76ef90c4ef28b45b7d05c47cec1b3ccb8e244dd424e254e4a954f669356a1b71d46ac03b611967cea9d790aeaa2254df53bc517d4d70d07081e5c9eef54403d084344dd79b461658a3007d288054399f852cf11e332cbfcf3f5b2fa1e71daaadfe67a85d9559fa0edddd0b7146624fe058ff06bbb44bed7e5e62b9fbfb631a352298f3192c"}, {0xa, 0x0, "68d4482da0f4"}, {0xa5, 0x0, "4eb22debe8ba6a7a24d5077603794e7e5bfdfef423d1eef4b15104c86b17d2959890eea541d6b7fa2ddee3264ecdcdd7d3d919eae4e7d2aa523dd4f8bade959c05548a94b81cb829fde453f275110cd10381adf98426e30442b43e341ef830e83d56b8d3fbee0b4a3f8190734273ca1e7459c20578a0f558934b9058eeade0fa62e189ee7188b11c615a4917675454d88367c1e964332bbb481324c93d9b9e6e8e"}, {0xad, 0x0, "cdab7c550e3ec9b96ac44d4e1bfe105ec3b2210593fd7e34a7f0453525a141887a1868f7f852e3c165ef8a6d5cefb67089ab22231ae1c5e75cd28c4d45713c25fcefbdca6f514a79aef40fce2257df456d130661f82297684ff987dd2d2820bfb23d5333033df4713143ad71f938f5beed67bd418323e83f819abd0548a7203b2b8ee3f230aea3d13246fdc72b5094b4044c1afd8b30e247b47815a6280dab36f0c741440bb4fb625d"}, {0xcb, 0x0, "e6025c4a256e31e8b1d4e44c0bc4955c0694d48fd5b56db30b86e6dc108cbd6915690bd05e15b2676053474c13a29cffa8c97de3c0943fcbde653abc87fce2d73ee147534fd671f0d8453d301096cde9c55556bddbaa7d97dd5d25c76997ab7b1d1e3cb3408d13caf2394c398a91c769061c51f5f37f7b838e4224cfa5a1b22a66bd74955533851d9fb7e547446f16b1e51fa5f4c694f884a20049753a5af61d01ebd01f449d1e2ca2c7c61ec57f500821ce3ab116d6e52d706f039610df812ea6483f0777f2b8"}, {0x61, 0x0, "037db0546897a60a126b40eacc46d4db94cbe325b292828ddec44a30b45e867e337b258d0990b068664f202424fc7329b1c56d2f75807f1e6736bc4390bf04ac1d80225081517c811f2ce43462ff533f490ab9b92df48985e0d97ed9ca"}, {0x103, 0x0, "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"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x328c, 0xe, 0x0, 0x1, [{0x8c, 0x0, "21aafd231946974fc6b344197e363a731e47eaa641c04e3a38b7d841b5142c49875d06df557679d9769c504130b3698c7bbbe6312205461a96e7e3382e4de0cdea2277ea57efdb8b811074f9c792e73961a985096b632f4c3e0a87df3679804fb7cf6b2bc5839406ce05fa6a29ad618f2432ae24a1ff7cef1dd03aceb59886833b934408d96f69a3"}, {0xda, 0x0, "d9881ece21334616a5354a857db8d975dc322e62a686e705ea7d60e7802cb6b6db848de554d6db479fe21152866be6095c27b0ef061b9e53bb1ff73f0b1bcec7dd767ab85c708118159d5ff4d30d28ba8caf8ce227900a06da880e95d62d2f35c50a9aa2c45b1f072ece6b21afb579cba5038d1c1348be2fdc29b6646d77e66131c3413c7f307b57946b25595764ad7fcd575e971abb1358072d7db0b836f6a9ecd16fda4761b3fdd599ca5bc719d2605d979eee7a0f267b2cbfff488b70691808cbb998c73ef6575621d9cb4e74ada70acde76e90d5"}, {0xb4, 0x0, "33b97e58ffcb057bf92bd1ab3cd7142efac5103fa2cd7648910949eed55f8fcefec629d341cf78221349d9a726fada100ca74c80b7a7dade5c8c7af4d8633b755481f29e1af9b59c60d1e40d99347aa013ff5a02a6552671fed9e53e8a4df75df6636159eef4ba5cd03175f35b7b1be5bd0fa267421ab95e61c5e884eff994fec6d8546adf656113eefa87dad53c5c4bc6b637d42da50ba78b36c78beb679b353013f17ea8f8f20860452ca9e7091949"}, {0x1004, 0x0, "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"}, {0x60, 0x0, "63b55a0d2fc3e5345d894d3cf6203367194c1911c01fb25ac6cc017fd4973e9a2046348e0df0cb79a36f62ac5527ef5764346064d42a08ec20481edb9797cf7e3eb953f0497ce8da8a997ccce317133631778bf041a40a96a3ade126"}, {0x1004, 0x0, "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"}, {0x1004, 0x0, "01c8bc1ec4a4256f4a6e78b1d914344d2b148616eb434d054d143b272d556b7a4ec07da54785f71d1a16f95262b265b5c351ddb1f399072234181a3f6c529922e6f869f25f05193e2181b1ccf81d307702a0947f68897d9f64c4fabdc97169fd1f5bad2d18872acfc09a6a31bafe96fb16b7b524f846e484a13866cbeec2ccc581d7ace2b5fc8433285667f31132f4a193fc5ef07611cfe54a905785787d8385f004da4dd7f500b16f30cb03c096f29f0e7c610b91cb80d488d1c51046a5ffb87d7daa97605f987356860659b220b6a3883cfb8f40dfcebc4d18a1f763a416e82d33fb78e2f0b85d811cd13079e9407867683023dc5eb645e2b94b90e08c36116efd172a8683baf61efddd893969e23836030f3f4f11797f441fff98e62753ef73b0a2bcb85a2daf0f16d884c5ae5bdb397f69adbcc623728f48b884e1dc311c7bbee8db9a87dca4759a574661989e0cbc578e958eadfed417aa03ec471d211748389fa3f7775974e7205eddb21c3eb7f1f19b36a46e39d5d585076509c33a45f0af26f4528bd11467e455322cb013dff82a4211f830178d595f29d8258895c0cdc04a43bcdd972c74d4a2d2044fecd4ebe920aea4205ee139cb65a1b2809bfc796ed109726d6008fd163d57214d9f6c31c2ad9552376128cdf4ead8dbc4e535de95f21d56865626aee2ae4d3ee8d4eee404c7fb3af58564696af830341a442e0a52f221d364f88d2a7b4d2119f8895899ab46e914b303a32ffaaecb57ddfc1ef818101a5583a5ced5ad0430cbe219fbdcbd8b7bdaffba312739fbe556fc3f92e3c3afd4c12f94f193edbce3a3f4c8ac4d68d21c207548d40e9cb027d779119fd57976533ab31c49428f5bdc007b6b4c2ccf4f8ae6447ca78923478c321d978c776e97e3bc9b8c54ebcfd76a176e79fd96ce61198e5aad052d8223c284c6d2f9d7621ca117126e380f0b2c21f5560098606240b3cd3a7cfbf06f916b436d4d0b3099163835cef01e7ba4fd20a0487cb1b32e93c94f57f1024063e12c19ee122043dda56291d76a8a7e34e8fb0bd06579313d85682e266ca0b7066727cac26dc4f2bf519ff13aa6f595346eb9c626b953aa6c5d83ec5338815eef8c93c718b006d64343a648ac265929365460eb0e80855af3a750fa2440f2e677a568d4e2ca462fd7356e6c925c3c4df86a74ce9775a7fa14e68b33787576aadf7e9d70d90636aa659358a0da6b66d2ec26e991b9b148a2e4b8c564b333616842284204546bdffdce8c08e513f48bbe61a70d3a8df8d00ce11b54a9df0e1c9da354b946498bf4bc7fa9fba16afe229f84c9855a22d38f5166f8ab4f15e686e313f7743e166d49d0ff05372a26af641b4f4c448881243efdcbcfbba66fa3c6a4830906e3da8e6c61da23e654216b59e696950edc2ccd0b4b86ef9d93a865c4e9a80d0d84a190333a7c804246c553e17459d86b76b79759ae126ef6c0501ce0c0fad62039622233c27b76d0f04d5c35979c47aee06684e1c984d996ddaad5f34e140e2f25d1435f1a4c10fed7504aefd595c4e450a8d0af4af7d37063f2f7c5a645289e8f13c57ff9ec35b9f02b059ff2f7009795fa329fe2f04ea70ca37e9b6180b77ec78dd7a960b3ff0e490a81090f6d72f3251d4f479c894966079f451bc5b946fe0a7a20dc93bbb5dc843ed0a1095987f7ae0ff6d95d8e9cc971ea3e0dbf4faba0fe6cc2a808c7b9325e6c5e29153ff0f8efaa6399182089ec7ca7ce388863dc7e611f0e9cac94af8b5733c48f967ced21755cd8253ac2f4b140022698db0a581ad5ae26a56e672806b001e174d016c902638539f0967b2f4e7cc3c0435006c41bd9c4c2c7f2c54ba3c4b06e9785be1a7669b614d6615645c527e2509d9978c8619cf387c8bf6ee66a6d4834542836101aff8b4a759da0b53f2543f001f53dbc8fa6be6dc36f9c96c4ab0ae78cfa15ffefc5496770ec5770220d28ac648f7f8ac7b0460109e32596975433fda7d1b5e0a38c4813319d0804f9328afc6880b4d546d5ef637e1fd2f7b6f963db92142f2e15967f211bf07a47e955f9b47a8088f6f8d1b446a03ef0e73ca4dc5111f9e5393c59b0b4648cc18d1ee592cdc76b3e81f44c5b896167a5286f0071328d9a2f70170c5aef1a7dc8e9596b654f6133eb36346a005094a5e4be951c3e24c61da58fb33da83e770b6612771b9687c488c78a0819d1ce0aef9bb25a742c28dc939c4a4c9dfe02c093c280f2136877131b8fc5fe51f82276b0843c9ae7923b37332f87a58e6affd24fae0c7913d20d1efc364494bb8fbe85f11ee2fb047824655acda933463d171bd6dd925614c7eba887d1353951e87c29ec62286170695e4400d72d6b2e3528ca8dbcbb744129264cbce0e40574d0a82d7dae06db4a7c79d2fe449926efa69fae75f2425ba8f02982d83ccebd295bff1b08263437145a99a772801f8bf2045428918d98f3e02278b291b16301ca305a14188cd0d728679bdc34dd31a6129ca325eab10b2f0f458df746e02e7a912c3683d533a56d973b0658babbe2e54360d9ad2241ae30805b4ce416c8458d1fff50463ec49871e37abf9d0478c07ab27d6ae72a79872f014364b040701bac6cab9aae55424dd825d7f70d9009b03a5a291d5d39a5357c9d0e2b17418c495c54b40f6d3a77b4bc7bf447dd35c539a719f57f5400216c5fbfc5bc746c1fe982f709050ae121815707835f7066a1489fef66bfdd7f32284f43c006f7bdc939ca5fb5fee739742729bc757d4f83ccfbe390bf4545cd33ed2b1f3a7e6e0fbbd33fe45c690f4b0cb7ed658f7d2498d72c930690cceb7378484160c1be2926fd48d0d2f40d384e2724ed26ddca49687154f049dd62f71d1c85036125d01b9109240796761bc2f8e1670492ebd7a12774f6c4fab34727fd1d1cfa664bb687e0b1b3b49a8900189e0a7e530cd16c45c950059e3ed364dd08cbe37e04b1412bdb856d0dd63cded28c52e888a034d0ffe0b18727065bc618773e9bb83d74382bf9c63d1a3babbdc242f73b51bbc1d448bcd13f8604922c1ad44deed05303b9cfa5bfce5378e8ff6ff0b37ce18be7a24f11b66b8780fac998cc621395bf7f977aff2b9f999712dc7061bccc0fe17ff73a26446ec7355e884d9645ee3afbc9937a86c760b6734f443764b02ff2a444a0d83cb8ee1a7dfc7840edde63cbb5503804f5cd107e7c82b9b84d9bdab8abbe05bf0054697705fabe9af5099b66164d2a862a4c77c9c0f10be0a623f8cf80daf7ce602a2f13ad362590b53a3d10f5bb6dafdef5321f20f9ce4f4d3254315500f32908003da6b8efb292a636fd5f768584fdf72d51cfcf98e87c69d8a30be59f8e75090d2c7faa7962c9849881f7cd2e2c16e00e2c19543ddf9c4c1cab33f444ccf3e6dbac817b1559e004f028bbac07a6eb10015f5e8655d86adf6dbed24a13a0bd47653a81d0e3cf2ae878e27d24f098e2c02c63d8321ba91fdb1a3a386db78d2783af66fac2b47015159739691d0d9739c770a0c27c44ccc2c54a02692f42a6c840bf6f7aacf2a44558d00feeb760b90cf7263ae623820659626f366b4f14c19ea53d6dffe43b6039ea75ea1d78b2b6c288391fc82d04e2f70e1c3258db949dad53253008890637d813944f170afe490789346a146f1745719d6c28a2a072df05870a8939afece442c89574b4f2132a192650d10f9ac52700b9ca23243c41cfec6f4b1e9aad32900599efdb0431b5bb1f7f2d15c3f5c53c5aaaec9c14e2a5cf538bd6d326cc9c64ddb96916127fabcbada49a90460b7c2ef7eb8344348c194d6f3b16a09d32eb33e136c2ebc2838b3e7c43b47310beafb65b7cd00083b2f5ef789348546934f933205d77d277aca5e286eec1caa1a68077b20d50e9f42bf255530b07f7a554a85fa10fb41a556de8124b880e12e762ac6194f8d4b29ad659b0cac263adbbe0ec1bd2bb7604f5eae68fc1ca45d70412c1abc2f6b784cc9d70ecdd06f6015427b551783dfd562e226f0e2375b4dca457ce3d9b894386f35caad685bf784ee810e858334f0038ddf3d877d5d3978805bb69a431dda24e1f73f8d22b6e8fc7d60959601d0a55303a7267c8f939e715df8cb912362991bf5bde28841c4aaf41c2f91b56f295e8fc92d05054ad49bef5f31f9becb20f0d9b6b1372d4d3aee2404835bd0ed42ee8e2baba1116459d8ce670351b679db9d9ced0621101478970341d8a20783af3fec8cdb1de0ccf87bf61a8a71395803c09aac7bb7999c8629a4345b7ff617ba3350b96fcd1dd66556a667dfb2d133f0ece8665680da659b1c390e2cb32d64a0dda52d78b6e3c70f6253be0d6890cf6ecf5ae71ac770d1271304099b982d6c1592f21a2d934aab44ea7b87d99f47816c23f668671c8384ee2e42e8897fc13966c98313e5315b6ceacfa5e726b1741baa2856b87f2b5771c1341976c411ca38ea7c8c0c7d22aba5b658d58f5dbeb516f393dae0ccf0f141b1f6aef9ee5c39226ca79a9c95928300d51b4c4b1da3f8cf35ebe8a9c05b056dcb7d2f7a4df04deb44883c28d7f3d8cfa247ff1db0e5cbec79f520d1ffb89fd8590bb2793a2c520008d95deff861e3181759e332ae2c67a23269012ab72813298a55be52e440cf14ee9521b297287273e62f2e04ec2e5f74cffe76a98af4a41187cf60798682e0e4901f9910af0a68aea0e24d44e91818e521b0d5e04cc7ae7cfb84a8f6fd90aaa696dbf6d5b178ffdfbd43bd2e61a3134e41243234c942f88b5bb454d0c26f89588cadd95d36f8314c15df5cc9134f8910b6a1e33089804df79325ab63f5e86eafd30a67b566d81764262ea46a92dedde99462c955e38be08c15166e280aa2c648f6c906bd07cde338acffb0e476c235f1b69516d057430adef85a09dd5993372dbf4979b7e757c852a733fd8b30e8435bb5796a336855268fb89ec56fb356e7ac81dcf8d7f86c383376ca69bb34cb5fb4a924cf0bd280a3b7b30b6612d4539b8100b2323e2fbc72e7b569b4e05ca30be015c84be2e9c465bd520a33b150cd0b92635e1a124aac68fdfa562673db3d0ccc723d0caf41bf1ee145b42425e6e0abc8151e3db10e2d94a6f8f1af337836f8ae673178728d5b1575f95178189e67cadd81a1dd9201e7295de2021c249393937a4565142fee116ddc584eed797c40a439ee6bdf6be77d474d69f6e3a8cc96a7cd7f3df1728cd7b94e772a284ff2c04ae37c867ce6f92e273566809e47b74234327ced316dc98b42d156efe84a5437fb9cbb39b8fc11a2bff5aeae41208ecdbed1461601f8d33ec99996b0bac1acfb113dd84175d756040adcd88e2e131e786deb406cbdc5c8e9bdea2a15c448077dfdbc6c33b164ae558178c30f5673c6dd12c17ce96bf289252a3e64e4d402e09a8e506841f123d6c28417f55127f4972ca98587842009daea74c209bcdf60a02d4d1595d02d050134d7363b38f6d2524e92de312648e4e911471efca7449374374bd74398f41f9b0fcefba517666436fddc8acbf84b6886b608a11d527b92b784883399de85b33a46b00ebea583c6919525d5eac44c1c2385ea42d212fde149673d4ea97603b2fb7cb76682345899f3161e8c07aebb4639e1b982e9bb6160a730aab0e0464a78560ac758a0a3a90b99ed48a23eae6a328c5faa431b4a023718ed7d81ebbddb68d0faa2efc83b1b5da07ad4a59091a7595346801fe336a628c5e4b154a44719b583ac125ae9eb0a3b0a3d6fa451730408a7a93489d2dcdca006fdfad21af691435a5187c172627004eb23f643c"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xaf, 0xb, "0db4b8ec93b52805c2876031deb9c6368043bffe1e63a54dbff85b4ec9a31914bcb25eddf9380636468a16c090c78a187a136802751af8f7bedd400bd2105e8d8c72132804fe8d61a9604ffa4030733c646dfb4410a70a67dd7725937f5c2e2cb7ab73d6d4af418754a49c82ce334714666183215947011e8810e00f2a0c80a4cf6f1bde3902de540cd2d534f9b84f5eff5044abae02604762889b3d72fa78e2d254c4e17370e1e0a51afd"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}]}, 0x4d88}, 0x1, 0x0, 0x0, 0x815}, 0x1) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r11, 0x0, 0x0, 0x10, &(0x7f0000000200)={0xa, 0x4e23, 0xffffff69, @loopback, 0x8}, 0x1c) mount(0x0, 0x0, &(0x7f0000000000)='exfat\x00', 0x200000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r12 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r12, 0x119, 0x1, &(0x7f0000000080)=0x8, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r12, 0x119, 0x1, &(0x7f0000000340)=0x7, 0x4) 1.011805941s ago: executing program 7 (id=8809): creat(&(0x7f0000001380)='./file0\x00', 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000400)=[{0x1, 0x2, {0x1, 0xff, 0x2}, {0x2, 0xf0, 0x5}, 0x1}], 0x20) write$vga_arbiter(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="7472796c6f636b2069e58a590d226eaf76f718cc28fb6f2b6d656d00a310cd2c57f359c5992bc600ed9d8b5f2eea9262750023094ce032c554073d652971c243acce286ed3e36c98a4324c580dc9c5df9aa0bfd8abc44d311a7603e5016746bc42ab51ea810625dcec23d9992414fbd6046e"], 0xf) statx(0xffffffffffffffff, &(0x7f0000002780)='./file0\x00', 0x1000, 0x2, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='vxfs\x00', 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r0, 0x0, &(0x7f0000001480)) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async) close(r1) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000400)=[{0x1, 0x2, {0x1, 0xff, 0x2}, {0x2, 0xf0, 0x5}, 0x1}], 0x20) (async) write$vga_arbiter(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="7472796c6f636b2069e58a590d226eaf76f718cc28fb6f2b6d656d00a310cd2c57f359c5992bc600ed9d8b5f2eea9262750023094ce032c554073d652971c243acce286ed3e36c98a4324c580dc9c5df9aa0bfd8abc44d311a7603e5016746bc42ab51ea810625dcec23d9992414fbd6046e"], 0xf) (async) statx(0xffffffffffffffff, &(0x7f0000002780)='./file0\x00', 0x1000, 0x2, 0x0) (async) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='vxfs\x00', 0x0, 0x0) (async) 965.737414ms ago: executing program 7 (id=8811): mkdir(&(0x7f0000000380)='./file1\x00', 0xe) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x80000, 0x148) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r2, 0xd6bb3000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001e00010026bd706e6e24139e074c2100"], 0x40}}, 0x90) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 900.734287ms ago: executing program 5 (id=8812): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000014c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="1c002d8005000400010000f30400010095"], 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x4040000) 896.686577ms ago: executing program 5 (id=8813): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x6ca02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000180)={0x0, 0x10, 0x0, 0x0, 0x6, 0x2}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000580)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x6, 0x200, 0x7, 0x0, 0xd, 0x2040010}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x24}, r3}, 0x14) 885.124092ms ago: executing program 7 (id=8814): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x2c8000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file2'}, 0xb) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000804) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092, 0xeeee0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) 752.521783ms ago: executing program 4 (id=8815): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0x6388f000) (async) r1 = open$dir(0x0, 0x50000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x5) (async) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r3 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYBLOB="f9658ef1113b409cf39c82d5e087820e39947da2cd49e6697ceb176ddca6aa6b1f13b2a41dee6505ede9be5d5c5fb128121427a0f31e778ce7ce7369a76817a06cab269989983e21e65b92b1a9f2ad9c3e0912198eccebe86895bf585dfcc415d0f3d90cd9c657b3ba2e5bc214bec881e88a31af4a3dae68118fbaa499dfe81c44a5b2a5fa1a186f920b2c830161bf138f15f74d8c5d676a562173fd254189eb78c227cb233bdae71e2297910f1d950032931a8252c65b001f8fa73ff0300b7e1d1833acda4076a67e701faaaedc8e1a91ee718d86baf9a81f2d5b0af025475f", @ANYRESHEX=r2], 0x0) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2, 0x0, 0xffffff95}) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000240)={0x3, 0x1}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r6 = epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)={0x20000000}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r9, &(0x7f0000000040)={0x40000006}) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x176, 0x0, 0xffff}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0xb, 0x80000, 0x2) 727.156253ms ago: executing program 7 (id=8816): ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x30) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="5300000007000046009d4063", @ANYRES64], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) sendfile(r1, r1, 0x0, 0x7ffff000) 526.116688ms ago: executing program 5 (id=8817): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async, rerun: 64) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x6}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/183, 0xb7}, {&(0x7f0000000d80)=""/255, 0xff}, {&(0x7f0000000e80)=""/4077, 0xfed}, {&(0x7f0000000100)=""/252, 0xfc}, {&(0x7f0000000000)=""/141, 0x8d}, {&(0x7f0000000940)=""/238, 0xee}], 0x6}, 0x4}], 0x4, 0x10100, 0x0) (async, rerun: 64) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x101, 0x7f}) (rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="380000001000010000000000fedbdf25070000001300000062000000", @ANYRES32, @ANYBLOB="18001280140001"], 0x38}], 0x1}, 0x0) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 32) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf411119edbbebbae, 0x20011, r0, 0x52fc2000) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x30, r10, 0xe096044a3fc9e6f1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) (async) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000080)={0x397f, 0x1, 0x6}) (async) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f0000001280)=@attr_pmu_filter={0x0, 0x1, 0x1, 0x0}) 437.346523ms ago: executing program 5 (id=8818): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x20011, r1, 0x1a1c1000) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fffffff, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000040)=0x7) 348.73481ms ago: executing program 5 (id=8819): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x100) 333.237905ms ago: executing program 5 (id=8820): write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x50}}, 0x0) syz_open_dev$evdev(0x0, 0x40, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000001080)=0xfff, 0xfff) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x85, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000200)=@sg0, 0x0, &(0x7f0000000280)='./cgroup\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0xffffc000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r3], 0x448}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x76, 0x5e, 0x83, 0x40, 0xc98, 0x1140, 0x31f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x3, 0xc0, 0x1, [{{0x9, 0x4, 0x8d, 0x8, 0x0, 0x59, 0x81, 0x12, 0xf}}]}}]}}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) mmap(&(0x7f000089b000/0x2000)=nil, 0x2000, 0x300000a, 0x22052, r2, 0x5708e000) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0xffffffc0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0x95b, 0x4, 0xb73, 0x6, 0x1}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r5, 0x1}, 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) 41.872677ms ago: executing program 4 (id=8821): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000014c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="1c002d8005000400010000f30400010095"], 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x4040000) 0s ago: executing program 4 (id=8822): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208003, 0x0) 0s ago: executing program 4 (id=8823): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r2, &(0x7f00000001c0)="0f0005", 0x3, 0x4004884, 0x0, 0x0) r3 = gettid() rt_tgsigqueueinfo(r1, r3, 0xb, &(0x7f0000000080)={0x0, 0x10, 0x2}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12f2a118010000772904202404019957c2010203090902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000680)={0x20, 0x12, 0x4, "be1f1285"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x20, 0x31, 0x24, "c3bc4f75ae"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffff9]}, 0x8) read(r5, &(0x7f0000000740)=""/377, 0x179) sendfile(r0, r0, 0x0, 0x7ffff000) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, r0, 0x2000) kernel console output (not intermixed with test programs): SB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1187.868484][T18381] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.886171][T18381] usb 8-1: config 0 descriptor?? [ 1188.346600][T18381] mcp2221 0003:04D8:00DD.002F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 1188.804278][T30353] /dev/rnullb0: Can't open blockdev [ 1188.890387][ T5869] Bluetooth: hci4: command tx timeout [ 1189.906875][ T3424] usb 8-1: USB disconnect, device number 89 [ 1189.980725][T30381] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1190.189942][T30394] rdma_rxe: rxe_newlink: failed to add wlan1 [ 1190.203223][T30396] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6193'. [ 1190.337700][T30405] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1190.367100][T30411] /dev/rnullb0: Can't open blockdev [ 1190.608774][T30421] ieee802154 phy0 wpan0: encryption failed: -126 [ 1190.632524][T30421] ieee802154 phy0 wpan0: encryption failed: -126 [ 1191.103010][ T5869] Bluetooth: hci4: command tx timeout [ 1191.788680][T30473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6208'. [ 1191.819874][T30475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6208'. [ 1192.797245][T30519] /dev/rnullb0: Can't open blockdev [ 1193.052106][T30533] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1193.198968][T30541] binder: 30540:30541 unknown command 0 [ 1193.208995][T30541] binder: 30540:30541 ioctl c0306201 200000000080 returned -22 [ 1194.368758][T30579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.397480][T30579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.848419][T30594] /dev/rnullb0: Can't open blockdev [ 1196.095233][T30612] /dev/rnullb0: Can't open blockdev [ 1196.880624][T30632] netlink: 'syz.6.6243': attribute type 21 has an invalid length. [ 1196.908044][T30632] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6243'. [ 1197.026888][T30632] syzkaller0: entered promiscuous mode [ 1197.044408][T30632] syzkaller0: entered allmulticast mode [ 1197.376930][T30643] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1197.386311][T30643] /dev/rnullb0: Can't open blockdev [ 1197.731788][T30666] /dev/rnullb0: Can't open blockdev [ 1197.741920][ T3424] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 1197.940600][T30677] netlink: 763 bytes leftover after parsing attributes in process `syz.4.6255'. [ 1197.945347][ T3424] usb 8-1: Using ep0 maxpacket: 16 [ 1197.978897][ T3424] usb 8-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1197.998451][ T3424] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.006529][ T3424] usb 8-1: Product: syz [ 1198.027513][T30679] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3344606356 (6689212712 ns) > initial count (4296193924 ns). Using initial count to start timer. [ 1198.042394][ T3424] usb 8-1: Manufacturer: syz [ 1198.049567][ T3424] usb 8-1: SerialNumber: syz [ 1198.322162][ T3424] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1198.386304][ T3424] snd-usb-audio 8-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 1198.413727][ T3424] usb 8-1: USB disconnect, device number 90 [ 1198.422253][T29378] udevd[29378]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1199.043996][T30713] /dev/rnullb0: Can't open blockdev [ 1199.095189][T30715] tipc: Started in network mode [ 1199.108646][T30715] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 1199.133402][T30715] tipc: Enabled bearer , priority 10 [ 1199.485451][T12889] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 1199.680784][T12889] usb 8-1: config index 0 descriptor too short (expected 65054, got 68) [ 1199.689742][T12889] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1199.709307][T12889] usb 8-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1199.742828][T12889] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1199.757314][T12889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.773020][T12889] usb 8-1: Product: syz [ 1199.777365][T12889] usb 8-1: Manufacturer: syz [ 1199.781986][T12889] usb 8-1: SerialNumber: syz [ 1199.809289][T12889] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1199.828573][T12888] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1200.329067][T18396] tipc: Node number set to 4269801514 [ 1201.195144][T12888] usb 8-1: Service connection timeout for: 256 [ 1201.201505][T12888] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1201.228057][T12888] ath9k_htc: Failed to initialize the device [ 1201.235774][T12888] usb 8-1: ath9k_htc: USB layer deinitialized [ 1202.455082][ T5950] usb 8-1: USB disconnect, device number 91 [ 1204.126339][T30801] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6290'. [ 1204.219582][T30797] binder: 30795:30797 ioctl c018620c 200000000580 returned -22 [ 1204.843458][T30820] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1204.872163][T30820] /dev/rnullb0: Can't open blockdev [ 1207.184148][T15497] Bluetooth: hci6: command 0x0406 tx timeout [ 1207.209419][T30889] overlayfs: failed to resolve './file0': -2 [ 1207.218650][T30889] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6303'. [ 1207.329215][T30893] syzkaller1: entered promiscuous mode [ 1207.335008][T30893] syzkaller1: entered allmulticast mode [ 1207.472776][T30896] rdma_rxe: rxe_newlink: failed to add wlan1 [ 1207.506151][T30900] netlink: 324 bytes leftover after parsing attributes in process `syz.7.6306'. [ 1207.603697][T30905] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1207.616096][T30905] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1208.048072][T18381] usb 8-1: new full-speed USB device number 92 using dummy_hcd [ 1208.186646][T18381] usb 8-1: device descriptor read/64, error -71 [ 1208.449131][T18381] usb 8-1: new full-speed USB device number 93 using dummy_hcd [ 1208.603604][T18381] usb 8-1: device descriptor read/64, error -71 [ 1208.722155][T18381] usb usb8-port1: attempt power cycle [ 1208.788400][T30932] syzkaller1: entered promiscuous mode [ 1208.794047][T30932] syzkaller1: entered allmulticast mode [ 1209.009143][T30934] fuse: blksize only supported for fuseblk [ 1209.084754][T18381] usb 8-1: new full-speed USB device number 94 using dummy_hcd [ 1209.107015][T18381] usb 8-1: device descriptor read/8, error -71 [ 1209.289739][T30943] rdma_rxe: rxe_newlink: failed to add wlan1 [ 1209.301471][T30943] /dev/rnullb0: Can't open blockdev [ 1209.362768][T18381] usb 8-1: new full-speed USB device number 95 using dummy_hcd [ 1209.389320][T18381] usb 8-1: device descriptor read/8, error -71 [ 1209.512862][T18381] usb usb8-port1: unable to enumerate USB device [ 1209.604822][T30956] netlink: 'syz.4.6323': attribute type 2 has an invalid length. [ 1209.613771][T30956] netlink: 'syz.4.6323': attribute type 8 has an invalid length. [ 1209.622067][T30956] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6323'. [ 1210.208732][T30962] syzkaller1: entered promiscuous mode [ 1210.214239][T30962] syzkaller1: entered allmulticast mode [ 1210.628294][T30973] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6328'. [ 1210.687328][T30973] syzkaller1: entered promiscuous mode [ 1210.693203][T30973] syzkaller1: entered allmulticast mode [ 1211.006310][T30979] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6331'. [ 1211.361719][T18377] usb 8-1: new full-speed USB device number 96 using dummy_hcd [ 1211.525828][T18377] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1211.539325][T18377] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.548374][T18377] usb 8-1: Product: syz [ 1211.552582][T18377] usb 8-1: Manufacturer: syz [ 1211.558238][T18377] usb 8-1: SerialNumber: syz [ 1211.564508][T18377] usb 8-1: config 0 descriptor?? [ 1211.787424][T18377] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1212.315881][T31023] nbd: must specify an index to disconnect [ 1212.417088][T31026] wlan1 speed is unknown, defaulting to 1000 [ 1214.818555][T18377] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1214.829579][T18377] usb 8-1: USB disconnect, device number 96 [ 1214.887884][T31039] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1214.896893][T31039] /dev/rnullb0: Can't open blockdev [ 1217.067834][T31080] /dev/rnullb0: Can't open blockdev [ 1217.706908][T31095] tipc: Started in network mode [ 1217.712707][T31095] tipc: Node identity 8a5e5bc91f05, cluster identity 4711 [ 1217.720232][T31095] tipc: Enabled bearer , priority 0 [ 1217.916066][T31094] tipc: Resetting bearer [ 1218.010279][T31094] tipc: Disabling bearer [ 1218.304631][T31100] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1218.315485][T31100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6371'. [ 1218.317060][T31102] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1218.333093][T31102] /dev/rnullb0: Can't open blockdev [ 1219.182313][T31121] /dev/rnullb0: Can't open blockdev [ 1219.282346][T31124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1220.005698][T31151] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6387'. [ 1220.016891][T31151] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6387'. [ 1220.392219][T31155] input: syz1 as /devices/virtual/input/input103 [ 1220.925008][T31162] /dev/rnullb0: Can't open blockdev [ 1221.717313][T31190] netlink: 'syz.7.6399': attribute type 1 has an invalid length. [ 1221.747734][T31190] netlink: 16098 bytes leftover after parsing attributes in process `syz.7.6399'. [ 1221.811694][T31195] gfs2: gfs2 mount does not exist [ 1221.955834][T31201] netlink: 5092 bytes leftover after parsing attributes in process `syz.6.6403'. [ 1222.191392][ T5950] usb 8-1: new full-speed USB device number 97 using dummy_hcd [ 1222.354244][ T5950] usb 8-1: not running at top speed; connect to a high speed hub [ 1222.363435][ T5950] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1222.377201][ T5950] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1222.386685][ T5950] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.394787][ T5950] usb 8-1: Product: syz [ 1222.399031][ T5950] usb 8-1: Manufacturer: syz [ 1222.403696][ T5950] usb 8-1: SerialNumber: syz [ 1222.411218][T31199] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1222.659594][ T5950] cdc_ncm 8-1:1.0: bind() failure [ 1222.669110][ T5950] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1222.676078][ T5950] cdc_ncm 8-1:1.1: bind() failure [ 1222.684391][ T5950] usb 8-1: USB disconnect, device number 97 [ 1223.223844][T31225] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1223.232012][T31225] /dev/rnullb0: Can't open blockdev [ 1223.352689][T12889] IPVS: starting estimator thread 0... [ 1223.359882][T31229] batadv_slave_0: entered promiscuous mode [ 1223.367092][T31229] vlan0: entered promiscuous mode [ 1223.389549][T31228] vlan0: left promiscuous mode [ 1223.394641][T31228] batadv_slave_0: left promiscuous mode [ 1223.453416][T31230] IPVS: using max 42 ests per chain, 100800 per kthread [ 1223.557187][T31235] binder: BINDER_SET_CONTEXT_MGR already set [ 1223.564177][T31235] binder: 31233:31235 ioctl 4018620d 2000000000c0 returned -16 [ 1223.573292][T31235] binder: BINDER_SET_CONTEXT_MGR already set [ 1223.579397][T31235] binder: 31233:31235 ioctl 4018620d 2000000000c0 returned -16 [ 1223.587350][T31235] binder: BINDER_SET_CONTEXT_MGR already set [ 1223.594903][T31235] binder: 31233:31235 ioctl 4018620d 2000000000c0 returned -16 [ 1223.835267][T31247] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1224.414096][ T5869] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 1224.422816][ T5869] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 1224.472509][T31260] wlan1 speed is unknown, defaulting to 1000 [ 1224.514306][T31261] /dev/rnullb0: Can't open blockdev [ 1225.202228][T31282] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6428'. [ 1225.350886][T31288] /dev/rnullb0: Can't open blockdev [ 1226.436773][T31312] wlan1 speed is unknown, defaulting to 1000 [ 1226.474232][T31313] syz.7.6435 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1226.793308][T31325] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1226.801096][T12888] hid_parser_main: 7 callbacks suppressed [ 1226.801121][T12888] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 1226.827440][T12888] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1227.687215][T31341] netlink: 'syz.4.6444': attribute type 1 has an invalid length. [ 1227.695158][T31341] netlink: 'syz.4.6444': attribute type 2 has an invalid length. [ 1227.709322][T31341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6444'. [ 1227.835792][T31349] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6445'. [ 1228.148116][T31367] Option ' ' to dns_resolver key: bad/missing value [ 1228.357245][T31383] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1228.372608][T31383] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1228.734018][T15497] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1228.742482][T15497] Bluetooth: hci3: Injecting HCI hardware error event [ 1228.750050][T15497] Bluetooth: hci3: hardware error 0x00 [ 1229.183656][T31378] block nbd7: shutting down sockets [ 1229.199326][T31403] netlink: 'syz.6.6457': attribute type 10 has an invalid length. [ 1229.224037][T31403] /dev/rnullb0: Can't open blockdev [ 1229.283587][T31407] tmpfs: Unknown parameter 'noinode32' [ 1229.288973][T31408] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6458'. [ 1229.916932][T31433] QAT: failed to copy from user cfg_data. [ 1231.031586][T15497] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1232.143027][T31453] netlink: 'syz.4.6473': attribute type 2 has an invalid length. [ 1232.617982][T31471] program syz.4.6478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1232.633514][T31471] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1232.687463][T31476] /dev/rnullb0: Can't open blockdev [ 1232.811272][T31486] netlink: 252 bytes leftover after parsing attributes in process `syz.4.6481'. [ 1233.801538][T18377] usb 8-1: new full-speed USB device number 98 using dummy_hcd [ 1233.988755][T18377] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1234.002580][T18377] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1234.013034][T18377] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1234.030404][T18377] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1234.040502][T18377] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.060056][T18377] usbtmc 8-1:16.0: bulk endpoints not found [ 1234.292376][T18377] usb 8-1: USB disconnect, device number 98 [ 1235.706334][T31542] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6500'. [ 1236.570168][T18377] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 1236.709336][T18377] usb 8-1: device descriptor read/64, error -71 [ 1236.987246][T18377] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 1237.145498][T18377] usb 8-1: device descriptor read/64, error -71 [ 1237.276483][T18377] usb usb8-port1: attempt power cycle [ 1237.395845][T31574] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1237.411510][T31574] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 1237.463215][T31574] /dev/rnullb0: Can't open blockdev [ 1237.486277][T31576] overlay: filesystem on ./bus not supported as upperdir [ 1237.650180][T18377] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 1237.710606][T31584] /dev/rnullb0: Can't open blockdev [ 1237.719568][T18377] usb 8-1: device descriptor read/8, error -71 [ 1237.992170][T18377] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 1238.024973][T18377] usb 8-1: device descriptor read/8, error -71 [ 1238.163553][T18377] usb usb8-port1: unable to enumerate USB device [ 1248.750017][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.756528][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1263.578439][T31600] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6518'. [ 1263.602081][T31600] /dev/rnullb0: Can't open blockdev [ 1264.091431][T31623] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6525'. [ 1264.331843][T31627] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6526'. [ 1264.983580][T31651] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1266.150834][T31661] /dev/rnullb0: Can't open blockdev [ 1266.210659][T31667] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1266.217332][T31667] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1266.230395][T31667] vhci_hcd vhci_hcd.0: Device attached [ 1266.238833][T31667] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 1266.246880][T31667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1266.258365][T31667] vhci_hcd vhci_hcd.0: Device attached [ 1266.265769][T31667] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 1266.272336][T31667] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1266.285789][T31667] vhci_hcd vhci_hcd.0: Device attached [ 1266.296816][T31667] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 1266.303472][T31667] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1266.311716][T31667] vhci_hcd vhci_hcd.0: Device attached [ 1266.386319][ T5950] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 1266.440712][ T3424] vhci_hcd: vhci_device speed not set [ 1266.514543][ T3424] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1266.558710][T31671] vhci_hcd: connection closed [ 1266.560690][T31675] vhci_hcd: connection closed [ 1266.561793][T23362] vhci_hcd: stop threads [ 1266.565452][T31673] vhci_hcd: connection closed [ 1266.574560][T31668] vhci_hcd: connection reset by peer [ 1266.584657][ T5950] usb 8-1: device descriptor read/64, error -71 [ 1266.589532][T23362] vhci_hcd: release socket [ 1266.597844][T23362] vhci_hcd: disconnect device [ 1266.607806][T23362] vhci_hcd: stop threads [ 1266.612820][T23362] vhci_hcd: release socket [ 1266.617333][T23362] vhci_hcd: disconnect device [ 1266.625816][T23362] vhci_hcd: stop threads [ 1266.630104][T23362] vhci_hcd: release socket [ 1266.634937][T23362] vhci_hcd: disconnect device [ 1266.639854][T23362] vhci_hcd: stop threads [ 1266.649678][T23362] vhci_hcd: release socket [ 1266.654435][T23362] vhci_hcd: disconnect device [ 1266.846026][ T5950] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 1266.984963][ T5950] usb 8-1: device descriptor read/64, error -71 [ 1267.113602][ T5950] usb usb8-port1: attempt power cycle [ 1267.498140][ T5950] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 1267.530813][ T5950] usb 8-1: device descriptor read/8, error -71 [ 1267.786715][ T5950] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 1267.811088][ T5950] usb 8-1: device descriptor read/8, error -71 [ 1267.936753][ T5950] usb usb8-port1: unable to enumerate USB device [ 1270.669244][T31738] /dev/rnullb0: Can't open blockdev [ 1270.946909][T15497] Bluetooth: hci6: Dropping invalid advertising data [ 1270.953921][T15497] Bluetooth: hci6: Dropping invalid advertising data [ 1270.960633][T15497] Bluetooth: hci6: Malformed LE Event: 0x02 [ 1271.055414][T31752] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.6563'. [ 1271.531124][T31772] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1271.537266][T31772] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1271.555147][T31772] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1271.561905][T31772] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1271.570112][T31772] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1271.579989][T31772] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1271.589473][T31772] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1271.652032][T31779] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1271.934724][ T982] usb 8-1: new high-speed USB device number 107 using dummy_hcd [ 1271.998932][ T3424] vhci_hcd: vhci_device speed not set [ 1272.119682][ T982] usb 8-1: Using ep0 maxpacket: 8 [ 1272.131270][ T982] usb 8-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1272.143676][ T982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.152245][ T982] usb 8-1: Product: syz [ 1272.156498][ T982] usb 8-1: Manufacturer: syz [ 1272.164434][ T982] usb 8-1: SerialNumber: syz [ 1272.172353][ T982] usb 8-1: config 0 descriptor?? [ 1272.184447][ T982] radio-usb-si4713 8-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1272.383563][T31785] netlink: 'syz.5.6572': attribute type 10 has an invalid length. [ 1272.394555][T31785] team0: Device tunl0 is of different type [ 1273.267300][T31795] kvm: emulating exchange as write [ 1273.279735][T31795] /dev/rnullb0: Can't open blockdev [ 1273.416590][T31798] /dev/rnullb0: Can't open blockdev [ 1273.607565][ T982] radio-usb-si4713 8-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 1273.631262][ T982] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1273.720208][ T5869] Bluetooth: hci0: command 0x0c1a tx timeout [ 1273.726367][T31393] Bluetooth: hci6: command 0x0406 tx timeout [ 1273.732982][T15497] Bluetooth: hci4: command 0x0c1a tx timeout [ 1275.915345][T31868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.929371][T31868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.945137][T15497] Bluetooth: hci4: command 0x0c1a tx timeout [ 1275.951216][T31393] Bluetooth: hci6: command 0x0406 tx timeout [ 1275.957435][ T5869] Bluetooth: hci0: command 0x0c1a tx timeout [ 1276.856149][T31889] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6599'. [ 1276.866020][T31889] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6599'. [ 1278.167493][T15497] Bluetooth: hci4: command 0x0c1a tx timeout [ 1302.358639][T31899] cgroup: Name too long [ 1302.381770][T31896] /dev/rnullb0: Can't open blockdev [ 1302.406114][ T30] audit: type=1326 audit(6048055047.046:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31898 comm="syz.5.6600" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe92418ebe9 code=0x0 [ 1302.451939][T31906] netlink: 'syz.4.6605': attribute type 5 has an invalid length. [ 1302.474548][T31906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6605'. [ 1302.486192][T31906] netlink: 'syz.4.6605': attribute type 1 has an invalid length. [ 1302.490926][T31914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.504768][T31914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.519957][T31913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.533935][T31913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.010760][T31927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.022175][T31927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.388986][T31937] /dev/rnullb0: Can't open blockdev [ 1303.539103][T31942] netlink: 'syz.5.6616': attribute type 10 has an invalid length. [ 1303.551876][T31942] team0: Port device dummy0 added [ 1303.731741][T31954] binder_alloc: 31952: binder_alloc_buf, no vma [ 1303.731746][T31953] binder_alloc: 31952: binder_alloc_buf, no vma [ 1303.750725][T31954] /dev/rnullb0: Can't open blockdev [ 1304.115064][T31965] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1304.123617][T31965] /dev/rnullb0: Can't open blockdev [ 1304.518365][T31978] netlink: 'syz.7.6626': attribute type 75 has an invalid length. [ 1305.072902][T31992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6629'. [ 1305.086776][T31992] 9p: Unknown parameter 'rfdlo' [ 1305.126785][T15497] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 1305.171065][T31998] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6632'. [ 1305.385927][T31999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.394594][T31999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.442332][T32003] syzkaller1: entered promiscuous mode [ 1305.447951][T32003] syzkaller1: entered allmulticast mode [ 1306.175884][T32008] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6635'. [ 1309.491330][T32045] vivid-000: disconnect [ 1309.495948][T32044] vivid-000: reconnect [ 1311.988462][T32086] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1311.995002][T32086] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1312.002812][T32086] vhci_hcd vhci_hcd.0: Device attached [ 1312.009781][T32087] vhci_hcd: cannot find the pending unlink 2048 [ 1312.031334][T32087] vhci_hcd: connection closed [ 1312.031692][T23360] vhci_hcd: stop threads [ 1312.041439][T23360] vhci_hcd: release socket [ 1312.046267][T23360] vhci_hcd: disconnect device [ 1312.085403][T32094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.094476][T32094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.440226][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1314.449514][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1315.125645][T32124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6674'. [ 1315.459274][T32127] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6675'. [ 1315.471075][T32127] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6675'. [ 1315.795871][T32150] tipc: Can't bind to reserved service type 2 [ 1315.957525][ T30] audit: type=1804 audit(6048055059.730:177): pid=32133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.6677" name="/newroot/314/file0/file0" dev="hugetlbfs" ino=156181 res=1 errno=0 [ 1316.006652][T32159] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1316.014364][T32159] /dev/rnullb0: Can't open blockdev [ 1316.050522][T32161] syzkaller1: left promiscuous mode [ 1316.056003][T32161] syzkaller1: left allmulticast mode [ 1316.980058][T32191] /dev/rnullb0: Can't open blockdev [ 1319.059667][T32216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.068506][T32216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.811654][T32222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.826822][T32222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.841795][T32222] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1319.852511][T32222] /dev/rnullb0: Can't open blockdev [ 1320.538049][T32226] netlink: 'syz.5.6708': attribute type 11 has an invalid length. [ 1320.943493][T32243] IPVS: length: 78 != 8 [ 1320.951738][T32244] binder: 32242:32244 ioctl c0306201 200000000680 returned -14 [ 1322.120000][T32255] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6715'. [ 1322.150599][T32259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.159577][T32259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.557232][T32269] netlink: 184 bytes leftover after parsing attributes in process `syz.6.6720'. [ 1323.580096][T32269] /dev/rnullb0: Can't open blockdev [ 1325.645472][T32292] /dev/rnullb0: Can't open blockdev [ 1325.741838][T32299] /dev/rnullb0: Can't open blockdev [ 1326.302552][T32318] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1326.322769][T32318] /dev/rnullb0: Can't open blockdev [ 1327.466628][T32326] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1327.733545][T32329] /dev/rnullb0: Can't open blockdev [ 1327.772246][T32332] netlink: 'syz.7.6741': attribute type 3 has an invalid length. [ 1327.780198][T32331] netlink: 'syz.7.6741': attribute type 3 has an invalid length. [ 1327.802087][T32332] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6741'. [ 1327.825229][T32331] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6741'. [ 1327.921693][T32340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6744'. [ 1327.930671][T32340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6744'. [ 1328.704069][T32353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1328.825913][ T3550] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9 [ 1329.095079][T32363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.104634][T32363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.126127][ T30] audit: type=1326 audit(6048055072.049:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.5.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92418ebe9 code=0x7ff00000 [ 1329.149077][ T30] audit: type=1326 audit(6048055072.049:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.5.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92418ebe9 code=0x7ff00000 [ 1329.173539][ T30] audit: type=1326 audit(6048055072.049:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.5.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92418ebe9 code=0x7ff00000 [ 1329.198603][ T30] audit: type=1326 audit(6048055072.049:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.5.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92418ebe9 code=0x7ff00000 [ 1329.221934][ T30] audit: type=1326 audit(6048055072.049:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.5.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92418ebe9 code=0x7ff00000 [ 1329.244608][ T30] audit: type=1326 audit(6048055072.049:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.5.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92418ebe9 code=0x7ff00000 [ 1329.267037][ T30] audit: type=1326 audit(6048055072.049:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.5.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92418ebe9 code=0x7ff00000 [ 1329.289503][ T30] audit: type=1326 audit(6048055072.049:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.5.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92418ebe9 code=0x7ff00000 [ 1329.315421][ T30] audit: type=1326 audit(6048055072.049:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.5.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92418ebe9 code=0x7ff00000 [ 1329.339011][ T30] audit: type=1326 audit(6048055072.049:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.5.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92418ebe9 code=0x7ff00000 [ 1330.421951][T32393] ALSA: mixer_oss: invalid OSS volume '0x0000000000000048' [ 1330.434337][T32393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.451043][T32393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.762889][T32397] program syz.5.6764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1331.056761][T32407] fuse: Unknown parameter '00000000000000000000' [ 1331.092441][T32411] /dev/rnullb0: Can't open blockdev [ 1331.416093][T32422] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1332.375000][T32427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.383846][T32427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.194288][T32436] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1333.399628][T32442] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6780'. [ 1333.426714][T32442] hsr_slave_1 (unregistering): left promiscuous mode [ 1334.067469][T32447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.088056][T32447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.677419][T32473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6791'. [ 1334.686601][T32473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6791'. [ 1334.908051][T32489] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6796'. [ 1335.079500][T32498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.089752][T32498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.107253][T32499] tipc: Enabling of bearer rejected, failed to enable media [ 1335.910332][T32514] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1335.934097][T32514] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1336.086466][T32526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1336.130885][T32526] wlan1 speed is unknown, defaulting to 1000 [ 1337.015436][T32533] syzkaller1: entered promiscuous mode [ 1337.021412][T32533] syzkaller1: entered allmulticast mode [ 1337.323736][T32550] /dev/rnullb0: Can't open blockdev [ 1337.475440][T32565] 9pnet: p9_errstr2errno: server reported unknown error ile0 [ 1337.897153][T32587] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1338.276553][T32605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.296845][T32605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.878648][T32607] /dev/rnullb0: Can't open blockdev [ 1338.958802][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 1338.958820][ T30] audit: type=1326 audit(6048055081.244:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32611 comm="syz.7.6838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8b478ebe9 code=0x0 [ 1340.213345][T32625] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1340.287011][T32627] dlm: no locking on control device [ 1340.306231][T32627] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1340.313458][T32627] /dev/rnullb0: Can't open blockdev [ 1340.849772][T32634] /dev/rnullb0: Can't open blockdev [ 1341.961618][T32659] syzkaller1: entered promiscuous mode [ 1341.967251][T32659] syzkaller1: entered allmulticast mode [ 1342.000132][T32661] 9pnet_fd: p9_fd_create_unix (32661): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1342.033545][T32662] /dev/rnullb0: Can't open blockdev [ 1343.163511][T32683] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6861'. [ 1343.664851][T32692] /dev/rnullb0: Can't open blockdev [ 1344.179141][T32705] sctp: [Deprecated]: syz.7.6866 (pid 32705) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1344.179141][T32705] Use struct sctp_sack_info instead [ 1344.201992][T32705] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6866'. [ 1346.335591][T32737] /dev/rnullb0: Can't open blockdev [ 1346.832716][T32750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.843163][T32750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.852614][T32750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.861940][T32750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.927605][T32751] fuse: Bad value for 'fd' [ 1347.103728][T32734] orangefs_mount: mount request failed with -4 [ 1348.070587][T32760] /dev/sg0: Can't lookup blockdev [ 1349.922708][T31393] Bluetooth: hci0: command 0x0c1a tx timeout [ 1349.922719][T32758] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1350.732978][T32758] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1350.740518][T32758] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1350.748056][T32758] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1350.940115][ T340] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6895'. [ 1350.954381][ T337] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6895'. [ 1352.146453][T31393] Bluetooth: hci6: command 0x0406 tx timeout [ 1352.913047][ T353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.921594][T31393] Bluetooth: hci4: command 0x0c1a tx timeout [ 1352.928674][ T353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.096715][ T356] /dev/rnullb0: Can't open blockdev [ 1354.126744][ T358] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6901'. [ 1354.148083][ T358] gretap0: entered promiscuous mode [ 1354.160318][ T358] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6901'. [ 1354.172211][ T358] 0{X功: renamed from gretap0 [ 1354.182195][ T358] 0{X功: left promiscuous mode [ 1354.187675][ T358] 0{X功: entered allmulticast mode [ 1354.198746][ T358] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1354.370715][T31393] Bluetooth: hci6: command 0x0406 tx timeout [ 1355.095363][ T370] /dev/rnullb0: Can't open blockdev [ 1356.342562][ T392] /dev/rnullb0: Can't open blockdev [ 1356.390717][T31393] Bluetooth: hci6: unexpected event for opcode 0x1004 [ 1356.390984][ T396] /dev/rnullb0: Can't open blockdev [ 1356.853637][ T416] netlink: 'syz.7.6922': attribute type 16 has an invalid length. [ 1357.288151][ T422] /dev/rnullb0: Can't open blockdev [ 1357.819398][ T436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.828227][ T436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.739409][ T451] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1359.757222][ T451] /dev/rnullb0: Can't open blockdev [ 1359.904662][ T453] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1359.928710][ T453] /dev/rnullb0: Can't open blockdev [ 1360.054275][ T461] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6936'. [ 1360.846839][T31393] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1360.857919][T31393] Bluetooth: hci6: Injecting HCI hardware error event [ 1360.865175][T31393] Bluetooth: hci6: hardware error 0x00 [ 1361.238543][ T480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.253138][ T480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.392694][ T502] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1362.401311][ T504] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1362.409916][ T502] /dev/rnullb0: Can't open blockdev [ 1362.415774][ T504] /dev/rnullb0: Can't open blockdev [ 1362.451149][ T506] syz.7.6950 (506): drop_caches: 4 [ 1362.668872][ T505] delete_channel: no stack [ 1363.081737][ T521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.093722][T31393] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1363.094610][ T521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.506439][ T532] genirq: Flags mismatch irq 5. 00200000 (pcl812) vs. 00200000 (dt2814) [ 1365.484382][ T535] netlink: 212384 bytes leftover after parsing attributes in process `syz.6.6960'. [ 1365.494330][ T535] openvswitch: netlink: Message has 512 unknown bytes. [ 1365.548413][ T537] tmpfs: Bad value for 'huge' [ 1366.218567][ T544] /dev/rnullb0: Can't open blockdev [ 1366.517523][ T550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.541368][ T550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.020644][ T581] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6975'. [ 1367.038002][ T581] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6975'. [ 1367.136221][ T586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1368.303850][ T621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.318725][ T621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.068363][ T653] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6996'. [ 1370.603982][ T629] kexec: Could not allocate control_code_buffer [ 1371.202806][ T678] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1371.545146][ T689] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.7008'. [ 1371.563547][ T689] fuse: Unknown parameter 'u頵蚷d' [ 1372.605868][ T700] /dev/rnullb0: Can't open blockdev [ 1372.768210][ T707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.780916][ T707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.941557][ T716] /dev/rnullb0: Can't open blockdev [ 1373.363235][ T724] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1373.401298][ T724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.410023][ T724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.049861][ T729] rdma_rxe: rxe_newlink: failed to add wlan1 [ 1374.060181][ T729] /dev/rnullb0: Can't open blockdev [ 1374.778723][ T764] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7031'. [ 1374.887689][ T771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.897197][ T771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.778036][ T790] /dev/rnullb0: Can't open blockdev [ 1378.132332][ T803] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7045'. [ 1378.282311][ T805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.291575][ T805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.131526][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1380.141942][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1380.266428][ T827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7053'. [ 1381.411240][ T840] rdma_rxe: rxe_newlink: failed to add wlan1 [ 1381.441266][ T840] /dev/rnullb0: Can't open blockdev [ 1381.819278][ T869] netlink: 'syz.6.7067': attribute type 46 has an invalid length. [ 1382.683026][T15497] Bluetooth: hci0: command 0x0c1a tx timeout [ 1382.683942][T31393] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1382.698243][ T875] /dev/rnullb0: Can't open blockdev [ 1382.719622][ T877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.730646][ T877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.097174][ T884] netlink: 200 bytes leftover after parsing attributes in process `syz.5.7073'. [ 1384.406248][ T920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.419666][ T920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.435382][ T920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.447666][ T920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.515396][ T932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7085'. [ 1384.884446][ T953] tmpfs: Bad value for 'huge' [ 1385.253583][ T967] /dev/rnullb0: Can't open blockdev [ 1385.672464][T15497] Bluetooth: hci4: command 0x0c1a tx timeout [ 1386.642400][ T1002] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.7103'. [ 1386.656982][ T1002] netlink: 'syz.6.7103': attribute type 12 has an invalid length. [ 1386.665540][ T1002] syzkaller1: entered promiscuous mode [ 1386.671598][ T1002] syzkaller1: entered allmulticast mode [ 1386.793240][ T1010] /dev/rnullb0: Can't open blockdev [ 1386.927733][ T1021] /dev/rnullb0: Can't open blockdev [ 1386.942426][ T1023] /dev/rnullb0: Can't open blockdev [ 1387.163180][ T1032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.171926][ T1032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.860958][ T1041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.870432][ T1041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.492571][ T1045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.501413][ T1045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.125924][ T1068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.134929][ T1068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.152056][ T1068] /dev/rnullb0: Can't open blockdev [ 1390.659640][ T1082] sg_write: data in/out 44713/14 bytes for SCSI command 0x0-- guessing data in; [ 1390.659640][ T1082] program syz.5.7128 not setting count and/or reply_len properly [ 1390.786058][ T1085] trusted_key: encrypted_key: insufficient parameters specified [ 1391.813390][ T1096] netlink: 'syz.5.7134': attribute type 10 has an invalid length. [ 1391.845117][ T1096] 8021q: adding VLAN 0 to HW filter on device team0 [ 1391.864051][ T1096] bond0: (slave team0): Enslaving as an active interface with an up link [ 1391.877931][ T1096] netlink: 'syz.5.7134': attribute type 10 has an invalid length. [ 1391.910080][ T1096] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1391.930882][ T1099] siw: device registration error -23 [ 1391.957777][ T1101] /dev/rnullb0: Can't open blockdev [ 1392.023495][ T1101] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1392.054685][ T1101] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1392.080745][ T1108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.105316][ T1108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.320951][ T1100] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1392.680690][ T1122] /dev/rnullb0: Can't open blockdev [ 1392.705975][ T1124] cgroup: Unknown subsys name 'cpuset' [ 1392.769329][ T1130] netlink: 'syz.4.7145': attribute type 1 has an invalid length. [ 1392.778749][ T1130] netlink: 'syz.4.7145': attribute type 101 has an invalid length. [ 1392.800025][ T1130] netlink: 480 bytes leftover after parsing attributes in process `syz.4.7145'. [ 1392.817234][ T1130] 9p: Unknown parameter '*2rans' [ 1392.994877][ T1143] /dev/rnullb0: Can't open blockdev [ 1393.213389][ T1148] netlink: 'syz.6.7150': attribute type 15 has an invalid length. [ 1394.224948][T15497] Bluetooth: hci4: command 0x0c1a tx timeout [ 1394.224954][T31393] Bluetooth: hci0: command 0x0c1a tx timeout [ 1394.361484][ T1166] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 1394.551938][ T1170] /dev/rnullb0: Can't open blockdev [ 1394.866567][ T1175] netlink: 22 bytes leftover after parsing attributes in process `syz.6.7160'. [ 1394.923305][ T1175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7160'. [ 1395.039723][ T30] audit: type=1400 audit(6048055389.710:261): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="/dev/dri/renderD128" pid=1176 comm="syz.7.7161" [ 1395.276491][ T1190] /dev/rnullb0: Can't open blockdev [ 1396.329468][ T1208] rdma_rxe: rxe_newlink: failed to add wlan1 [ 1396.376699][ T1210] netlink: 220 bytes leftover after parsing attributes in process `syz.5.7171'. [ 1396.388591][ T1210] /dev/rnullb0: Can't open blockdev [ 1396.448677][T31393] Bluetooth: hci0: command 0x0c1a tx timeout [ 1398.126365][ T1244] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7182'. [ 1398.196947][ T1245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.208594][ T1245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.342376][ T1252] /dev/rnullb0: Can't open blockdev [ 1398.404703][ T1256] netlink: 420 bytes leftover after parsing attributes in process `syz.6.7185'. [ 1398.414147][ T1256] netlink: 420 bytes leftover after parsing attributes in process `syz.6.7185'. [ 1398.432198][ T1256] netlink: 420 bytes leftover after parsing attributes in process `syz.6.7185'. [ 1398.443270][ T1256] netlink: 420 bytes leftover after parsing attributes in process `syz.6.7185'. [ 1398.455576][ T1255] /dev/rnullb0: Can't open blockdev [ 1398.620121][ T1260] input: syz1 as /devices/virtual/input/input110 [ 1399.736022][ T1275] fuse: Bad value for 'fd' [ 1400.890821][ T1287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7196'. [ 1401.289164][ T1295] /dev/rnullb0: Can't open blockdev [ 1401.342772][ T1297] netlink: 'syz.4.7199': attribute type 1 has an invalid length. [ 1401.350800][ T1297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7199'. [ 1402.327868][T23370] Bluetooth: hci7: Frame reassembly failed (-84) [ 1402.331401][ T1318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.345093][ T1318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.648199][ T1346] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1402.754694][T18396] kernel write not supported for file /1182/clear_refs (pid: 18396 comm: kworker/0:10) [ 1402.769900][ T1354] tipc: Started in network mode [ 1402.774801][ T1354] tipc: Node identity ac14140f, cluster identity 4711 [ 1402.782625][ T1354] tipc: New replicast peer: 255.255.255.255 [ 1402.789131][ T1354] tipc: Enabled bearer , priority 10 [ 1402.970886][ T1356] /dev/rnullb0: Can't open blockdev [ 1403.064049][ T1368] /dev/rnullb0: Can't open blockdev [ 1403.100652][ T1372] /dev/rnullb0: Can't open blockdev [ 1403.856962][T12888] tipc: Node number set to 2886997007 [ 1403.888498][ T1378] comedi comedi0: s526: I/O port conflict (0x3,64) [ 1404.487826][T31393] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1404.487899][T15497] Bluetooth: hci7: command 0x1003 tx timeout [ 1406.442313][ T1398] delete_channel: no stack [ 1406.449571][ T1398] delete_channel: no stack [ 1406.511226][ T1406] usb 8-1: USB disconnect, device number 107 [ 1406.548174][ T1398] /dev/rnullb0: Can't open blockdev [ 1406.554307][ T1406] /dev/rnullb0: Can't open blockdev [ 1407.655051][ T1425] /dev/rnullb0: Can't open blockdev [ 1407.676820][ T1425] /dev/rnullb0: Can't open blockdev [ 1408.163840][ T1430] dlm: no locking on control device [ 1408.316707][ T1440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.332531][ T1440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.521618][ T1453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.533296][ T1453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.253456][ T1528] /dev/rnullb0: Can't open blockdev [ 1412.335173][ T1542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7274'. [ 1412.441577][ T1544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7274'. [ 1412.552675][ T1548] /dev/rnullb0: Can't open blockdev [ 1412.972811][ T1559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.981575][ T1559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.992648][ T1559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.001477][ T1559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.662996][ T1581] usb usb8: usbfs: process 1581 (syz.5.7284) did not claim interface 0 before use [ 1413.674339][ T1581] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7284'. [ 1415.144423][ T1601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.159537][ T1601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.417254][ T1612] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(37) [ 1415.423916][ T1612] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1415.432773][ T1612] vhci_hcd vhci_hcd.0: Device attached [ 1415.702887][ T3424] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 1415.738994][ T1616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.747762][ T1616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.998254][ T1613] vhci_hcd: connection reset by peer [ 1416.004740][T23370] vhci_hcd: stop threads [ 1416.009146][T23370] vhci_hcd: release socket [ 1416.017378][T23370] vhci_hcd: disconnect device [ 1416.491637][ T1633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.500502][ T1633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.510473][ T1633] QAT: Invalid ioctl 21531 [ 1417.741578][ T1655] netlink: 188 bytes leftover after parsing attributes in process `syz.6.7308'. [ 1418.787710][ T1662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7311'. [ 1418.941490][T31393] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1419.132113][ T1669] /dev/rnullb0: Can't open blockdev [ 1419.429464][T15497] Bluetooth: hci0: unexpected event for opcode 0x080e [ 1419.945280][ T1683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7320'. [ 1419.955347][ T1683] /dev/rnullb0: Can't open blockdev [ 1420.390964][ T1703] /dev/rnullb0: Can't open blockdev [ 1421.112471][ T1728] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1421.155400][ T3424] vhci_hcd: vhci_device speed not set [ 1421.244072][ T1739] /dev/rnullb0: Can't open blockdev [ 1421.297183][ T1745] netlink: 168 bytes leftover after parsing attributes in process `syz.7.7335'. [ 1421.523050][ T1755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7339'. [ 1422.276004][ T1773] /dev/rnullb0: Can't open blockdev [ 1422.372720][ T1787] netlink: 'syz.7.7349': attribute type 1 has an invalid length. [ 1422.385499][ T1787] netlink: 'syz.7.7349': attribute type 2 has an invalid length. [ 1422.393838][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7349'. [ 1423.045410][ T1815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.061138][ T1815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.152125][ T1844] syzkaller0: entered promiscuous mode [ 1424.158263][ T1844] syzkaller0: entered allmulticast mode [ 1424.326404][ T1849] netlink: 'syz.7.7365': attribute type 4 has an invalid length. [ 1424.334515][ T1849] netlink: 17 bytes leftover after parsing attributes in process `syz.7.7365'. [ 1424.341646][ T1850] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1424.366059][ T1850] /dev/rnullb0: Can't open blockdev [ 1424.529142][ T1853] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1424.543677][ T1853] /dev/rnullb0: Can't open blockdev [ 1424.913776][ T1869] nbd: must specify at least one socket [ 1424.928440][ T1869] nbd: must specify at least one socket [ 1424.984100][ T1873] /dev/sg0: Can't lookup blockdev [ 1425.297770][ T1877] /dev/rnullb0: Can't open blockdev [ 1425.650048][T23370] Bluetooth: hci7: Frame reassembly failed (-84) [ 1425.913940][ T1886] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1425.952351][ T1888] Invalid/unusable pipe [ 1425.968357][ T1888] /dev/rnullb0: Can't open blockdev [ 1426.110002][ T1892] netlink: 'syz.7.7378': attribute type 10 has an invalid length. [ 1426.125522][ T1892] netlink: 156 bytes leftover after parsing attributes in process `syz.7.7378'. [ 1426.157052][ T1892] netlink: 16126 bytes leftover after parsing attributes in process `syz.7.7378'. [ 1427.943183][T31393] Bluetooth: hci7: command 0x1003 tx timeout [ 1427.955832][ T1901] netlink: 'syz.5.7381': attribute type 2 has an invalid length. [ 1427.970580][T15497] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1428.210316][ T1907] 9p: Unknown parameter 't)僎!絵' [ 1428.484839][ T1911] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1428.494399][ T1909] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1428.508837][ T1911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.529912][ T1909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.544439][ T1911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.553399][ T1909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.310905][ T1918] /dev/rnullb0: Can't open blockdev [ 1429.402848][ T30] audit: type=1326 audit(6048055421.850:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1921 comm="syz.4.7388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778b78ebe9 code=0x7ffc0000 [ 1429.431125][ T30] audit: type=1326 audit(6048055421.850:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1921 comm="syz.4.7388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778b78ebe9 code=0x7ffc0000 [ 1429.455459][ T30] audit: type=1326 audit(6048055421.850:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1921 comm="syz.4.7388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f778b78ebe9 code=0x7ffc0000 [ 1429.486147][ T30] audit: type=1326 audit(6048055421.850:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1921 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778b78ebe9 code=0x7ffc0000 [ 1429.511391][ T30] audit: type=1326 audit(6048055421.850:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1921 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778b78ebe9 code=0x7ffc0000 [ 1429.537159][ T30] audit: type=1326 audit(6048055421.850:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1921 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f778b78ebe9 code=0x7ffc0000 [ 1429.562157][ T30] audit: type=1326 audit(6048055421.850:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1921 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778b78ebe9 code=0x7ffc0000 [ 1429.604563][ T30] audit: type=1326 audit(6048055421.850:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1921 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f778b78ebe9 code=0x7ffc0000 [ 1429.639408][ T30] audit: type=1326 audit(6048055421.850:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1921 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778b78ebe9 code=0x7ffc0000 [ 1429.701088][ T30] audit: type=1326 audit(6048055421.850:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1921 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f778b78ebe9 code=0x7ffc0000 [ 1429.759283][ T1933] netlink: 'syz.7.7392': attribute type 1 has an invalid length. [ 1429.776592][ T1933] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7392'. [ 1429.789380][ T1933] /dev/rnullb0: Can't open blockdev [ 1429.798562][ T1931] netlink: 124 bytes leftover after parsing attributes in process `syz.5.7391'. [ 1429.977019][ T1941] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1665237869 (1665237869 ns) > initial count (677302680 ns). Using initial count to start timer. [ 1430.106418][ T1947] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1431.535675][ T1989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.557786][ T1989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.591115][ T1992] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.7406'. [ 1431.642084][ T1992] openvswitch: netlink: Message has 512 unknown bytes. [ 1432.106731][T23362] Bluetooth: hci7: Frame reassembly failed (-84) [ 1432.352224][ T2021] /dev/rnullb0: Can't open blockdev [ 1433.227854][ T2055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.240523][ T2055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.250163][ T2055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.262629][ T2055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.274894][ T2055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.287136][ T2055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.307941][ T2055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.322920][ T2055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.334051][ T2055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.362368][ T2055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.383051][ T2055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.408024][ T2055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.440682][ T2058] /dev/rnullb0: Can't open blockdev [ 1433.650889][ T2068] /dev/rnullb0: Can't open blockdev [ 1434.250548][T31393] Bluetooth: hci7: command 0xfc11 tx timeout [ 1434.256757][T15497] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 1434.407927][T31393] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1434.418800][T31393] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1434.429842][T31393] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1434.440319][T31393] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1434.448729][T31393] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1434.856792][T23360] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.918641][ T2085] wlan1 speed is unknown, defaulting to 1000 [ 1434.987439][T23360] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.092275][T23360] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.136706][ T2106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7431'. [ 1435.176071][ T2106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7431'. [ 1435.248038][ T2109] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7431'. [ 1435.283190][T23360] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.382988][T23363] Bluetooth: hci7: Frame reassembly failed (-84) [ 1435.678462][T23360] bridge_slave_1: left allmulticast mode [ 1435.696790][T23360] bridge_slave_1: left promiscuous mode [ 1435.714902][T23360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.752626][T23360] bridge_slave_0: left allmulticast mode [ 1435.776912][T23360] bridge_slave_0: left promiscuous mode [ 1435.784380][T23360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.175372][T23360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1436.221319][T23360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1436.274820][T23360] bond0 (unregistering): Released all slaves [ 1436.378210][T23360] tipc: Disabling bearer [ 1436.385763][T23360] tipc: Left network mode [ 1436.482753][ T2147] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1436.508163][ T2147] /dev/rnullb0: Can't open blockdev [ 1436.645311][T15497] Bluetooth: hci0: command tx timeout [ 1436.739364][ T2085] chnl_net:caif_netlink_parms(): no params data found [ 1436.816691][ T2164] /dev/rnullb0: Can't open blockdev [ 1437.209670][ T2085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.250089][ T2085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.264498][ T2085] bridge_slave_0: entered allmulticast mode [ 1437.277159][ T2085] bridge_slave_0: entered promiscuous mode [ 1437.292370][T23360] hsr_slave_0: left promiscuous mode [ 1437.298829][T23360] hsr_slave_1: left promiscuous mode [ 1437.304911][T23360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.322942][T23360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.333139][T23360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.342201][T23360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.357450][T23360] veth1_macvtap: left promiscuous mode [ 1437.364573][T23360] veth0_macvtap: left promiscuous mode [ 1437.370233][T23360] veth1_vlan: left promiscuous mode [ 1437.379404][T23360] veth0_vlan: left promiscuous mode [ 1437.557873][T23360] team0 (unregistering): Port device team_slave_1 removed [ 1437.574091][T23360] team0 (unregistering): Port device team_slave_0 removed [ 1437.585916][T15497] Bluetooth: hci7: command 0x1003 tx timeout [ 1437.585932][T31393] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1437.696124][ T2085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.707328][ T2085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.717653][ T2085] bridge_slave_1: entered allmulticast mode [ 1437.728672][ T2085] bridge_slave_1: entered promiscuous mode [ 1437.807045][ T2085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1437.819217][ T2085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.865391][ T2085] team0: Port device team_slave_0 added [ 1437.874041][ T2085] team0: Port device team_slave_1 added [ 1437.928658][ T2085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.935714][ T2085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1437.962643][ T2085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1437.975636][ T2085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1437.982980][ T2085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.015712][ T2085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.071117][ T2085] hsr_slave_0: entered promiscuous mode [ 1438.082420][ T2085] hsr_slave_1: entered promiscuous mode [ 1438.093586][ T2085] debugfs: 'hsr0' already exists in 'hsr' [ 1438.102126][ T2085] Cannot create hsr debugfs directory [ 1438.190526][T23360] IPVS: stop unused estimator thread 0... [ 1438.598074][ T2085] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1438.614246][ T2085] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1438.624366][ T2085] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1438.635787][ T2085] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1438.736109][ T2085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1438.768559][ T2085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1438.782404][T23360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.789668][T23360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1438.816831][T23362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.823992][T23362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1438.869853][T31393] Bluetooth: hci0: command tx timeout [ 1439.149721][ T2085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1439.519278][ T2267] netlink: 9896 bytes leftover after parsing attributes in process `syz.5.7449'. [ 1439.529841][ T2264] netlink: 9896 bytes leftover after parsing attributes in process `syz.5.7449'. [ 1439.581911][ T2085] veth0_vlan: entered promiscuous mode [ 1439.615131][ T2085] veth1_vlan: entered promiscuous mode [ 1439.656415][ T2085] veth0_macvtap: entered promiscuous mode [ 1439.670019][ T2085] veth1_macvtap: entered promiscuous mode [ 1439.695656][ T2085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1439.712139][ T2085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1439.732185][T23370] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.768334][T23370] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.790830][T23370] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.810728][T23370] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.871117][T23370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.885321][T23370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.910916][T23367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.922393][T23367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.039720][ T2276] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7424'. [ 1440.252468][ T2280] binder: BINDER_SET_CONTEXT_MGR already set [ 1440.259826][ T2280] binder: 2279:2280 ioctl 4018620d 200000004a80 returned -16 [ 1440.980498][ T2304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1440.987935][ T2304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1440.994787][ T2304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1441.093165][T31393] Bluetooth: hci0: command tx timeout [ 1441.192992][ T2322] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1441.210023][ T2322] /dev/rnullb0: Can't open blockdev [ 1441.306595][ T2329] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7467'. [ 1441.361859][ T2330] /dev/rnullb0: Can't open blockdev [ 1442.498914][ T2353] /dev/rnullb0: Can't open blockdev [ 1442.553955][ T2351] ptrace attach of "./syz-executor exec"[2354] was attempted by "./syz-executor exec"[2351] [ 1442.718756][ T2361] binder: 2355:2361 ioctl 40044591 0 returned -22 [ 1442.780015][ T2366] binder: 2355:2366 ioctl c0306201 200000000640 returned -22 [ 1442.818459][ T2368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7479'. [ 1442.972409][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1442.972427][ T30] audit: type=1804 audit(6048055434.534:294): pid=2376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7482" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1443.031873][ T2379] /dev/rnullb0: Can't lookup blockdev [ 1443.315926][T31393] Bluetooth: hci0: command tx timeout [ 1445.730964][ T2463] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7506'. [ 1445.741914][ T2463] netlink: 'syz.4.7506': attribute type 6 has an invalid length. [ 1445.756640][ T2463] netlink: 'syz.4.7506': attribute type 5 has an invalid length. [ 1445.767447][ T2463] netlink: 'syz.4.7506': attribute type 4 has an invalid length. [ 1445.801623][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1445.808213][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1446.120921][ T2470] /dev/rnullb0: Can't lookup blockdev [ 1446.657023][ T2500] vivid-000: disconnect [ 1447.043103][ T2513] netlink: 'syz.5.7523': attribute type 21 has an invalid length. [ 1447.055713][ T2513] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7523'. [ 1447.480855][ T2519] /dev/rnullb0: Can't open blockdev [ 1447.490835][ T2519] /dev/rnullb0: Can't open blockdev [ 1447.782288][ T2536] cgroup: release_agent respecified [ 1448.219573][ T30] audit: type=1804 audit(6048055439.445:295): pid=2552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7531" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1449.106429][ T2580] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7534'. [ 1449.218910][T23367] wlan1: Trigger new scan to find an IBSS to join [ 1449.878350][ T2502] vivid-000: reconnect [ 1451.091889][ T2613] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7545'. [ 1451.196802][ T2617] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7547'. [ 1452.166136][ T2633] program syz.6.7551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1452.270641][ T2640] usb usb8: usbfs: process 2640 (syz.6.7553) did not claim interface 0 before use [ 1453.296041][ T2654] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1456.534318][ T2718] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7575'. [ 1456.622612][ T2720] CUSE: info not properly terminated [ 1456.629644][ T2720] netlink: 'syz.4.7576': attribute type 62 has an invalid length. [ 1457.680591][ T2753] /dev/rnullb0: Can't open blockdev [ 1457.792148][ T2760] /dev/rnullb0: Can't open blockdev [ 1458.180940][ T2777] /dev/rnullb0: Can't open blockdev [ 1458.599660][ T2783] /dev/rnullb0: Can't lookup blockdev [ 1458.853771][ T2795] netlink: 'syz.7.7597': attribute type 29 has an invalid length. [ 1458.930455][ T2801] /dev/rnullb0: Can't open blockdev [ 1459.416964][ T2818] openvswitch: netlink: Flow key attr not present in new flow. [ 1459.454752][ T2821] netlink: 'syz.5.7603': attribute type 28 has an invalid length. [ 1459.529502][ T2825] syzkaller1: entered promiscuous mode [ 1459.535543][ T2825] syzkaller1: entered allmulticast mode [ 1460.368638][ T2839] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7608'. [ 1461.167478][ T2866] netlink: 'syz.5.7615': attribute type 6 has an invalid length. [ 1461.427740][ T2875] /dev/rnullb0: Can't lookup blockdev [ 1462.269626][ T2891] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7620'. [ 1462.292236][ T2891] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7620'. [ 1462.316116][ T2886] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7620'. [ 1462.390001][ T2896] /dev/rnullb0: Can't lookup blockdev [ 1462.585895][ T2904] sctp: [Deprecated]: syz.7.7627 (pid 2904) Use of int in max_burst socket option. [ 1462.585895][ T2904] Use struct sctp_assoc_value instead [ 1463.287768][ T2926] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1463.294346][ T2926] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1463.302551][ T2926] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1463.309279][ T2926] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1463.316084][ T2926] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1463.322825][ T2926] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 1463.329790][ T2926] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1463.336480][ T2926] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 1463.344059][ T2926] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1463.347742][ T2927] netlink: 176 bytes leftover after parsing attributes in process `syz.7.7635'. [ 1463.351918][ T2926] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1463.351956][ T2926] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1463.351988][ T2926] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1463.352022][ T2926] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1463.352053][ T2926] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1463.352126][ T2926] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1463.352170][ T2926] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1463.409020][ T2926] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1463.415677][ T2926] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 1463.422333][ T2926] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 1463.429559][ T2926] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1463.436217][ T2926] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 1463.443445][ T2926] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1463.450124][ T2926] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1464.003561][ T2939] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1466.188303][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1466.612750][ T2965] /dev/rnullb0: Can't open blockdev [ 1466.693580][ T2967] /dev/rnullb0: Can't open blockdev [ 1466.796905][ T2971] netlink: 'syz.4.7648': attribute type 40 has an invalid length. [ 1467.534709][ T2985] /dev/rnullb0: Can't open blockdev [ 1467.914527][ T2993] /dev/rnullb0: Can't open blockdev [ 1468.205745][ T3005] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1468.212845][ T3005] /dev/rnullb0: Can't open blockdev [ 1469.115565][ T3014] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7664'. [ 1471.327894][ T3053] /dev/rnullb0: Can't open blockdev [ 1472.057713][ T3075] /dev/rnullb0: Can't open blockdev [ 1473.725501][T31393] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 1473.725958][T31393] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1473.742132][T31393] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1473.755668][T31393] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 1473.756424][T31393] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 1473.940869][ T3140] /dev/rnullb0: Can't lookup blockdev [ 1475.834614][ T3191] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1475.842035][ T3200] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1476.243559][ T3225] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1476.250876][ T3225] /dev/rnullb0: Can't open blockdev [ 1476.723005][ T30] audit: type=1804 audit(6048055722.105:296): pid=3227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7736" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1476.814130][ T3229] /dev/rnullb0: Can't lookup blockdev [ 1477.428989][ T3257] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7745'. [ 1478.396148][ T3267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7749'. [ 1478.405871][ T3267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7749'. [ 1478.547445][ T3277] netlink: 100 bytes leftover after parsing attributes in process `syz.5.7752'. [ 1478.587673][ T3277] overlayfs: failed to resolve './bus': -2 [ 1479.731792][ T3296] @: renamed from vlan0 (while UP) [ 1479.739723][ T30] audit: type=1804 audit(6048055724.939:297): pid=3296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7759" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1480.774957][ T3337] /dev/rnullb0: Can't open blockdev [ 1482.095843][ T30] audit: type=1804 audit(6048055727.137:298): pid=3366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7783" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1483.156426][ T3383] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1488.145379][T31393] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 1488.329046][ T3458] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7808'. [ 1489.033021][ T3485] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7817'. [ 1489.042411][ T3485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7817'. [ 1489.849899][ T3503] /dev/rnullb0: Can't lookup blockdev [ 1490.817495][ T3556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7837'. [ 1490.855965][ T3558] ./cgroup: Can't lookup blockdev [ 1491.909083][ T30] audit: type=1804 audit(6048055736.314:299): pid=3571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7843" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1491.932829][ T3571] netlink: 'syz.5.7843': attribute type 7 has an invalid length. [ 1496.059578][ T3628] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7861'. [ 1496.069644][ T3628] 0{X功: entered promiscuous mode [ 1496.075916][ T3628] 0{X功: left allmulticast mode [ 1496.083478][ T3628] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7861'. [ 1496.092996][ T3628] 1{X功: renamed from 30{X功 [ 1496.099895][ T3628] 1{X功: left promiscuous mode [ 1496.104957][ T3628] 1{X功: entered allmulticast mode [ 1496.111779][ T3628] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1496.356910][ T3639] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1496.399101][ T3644] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1497.185939][ T30] audit: type=1804 audit(6048055741.243:300): pid=3673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7875" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1497.526051][ T3681] /dev/rnullb0: Can't lookup blockdev [ 1498.200523][ T3693] /dev/rnullb0: Can't lookup blockdev [ 1499.135909][ T3717] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1500.688069][ T3750] /dev/rnullb0: Can't open blockdev [ 1500.707675][ T3750] netlink: 'syz.4.7898': attribute type 5 has an invalid length. [ 1500.716353][ T3750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7898'. [ 1501.000633][ T30] audit: type=1326 audit(6048055744.816:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3754 comm="syz.5.7900" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe92418ebe9 code=0x0 [ 1501.058704][ T30] audit: type=1804 audit(6048055744.873:302): pid=3757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7900" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1502.031899][ T30] audit: type=1804 audit(6048055745.789:303): pid=3771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7906" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1502.179044][ T3774] /dev/rnullb0: Can't open blockdev [ 1503.694567][ T3811] netlink: 'syz.6.7917': attribute type 5 has an invalid length. [ 1503.702829][ T3811] netlink: 'syz.6.7917': attribute type 10 has an invalid length. [ 1504.361661][ T3831] wlan1 speed is unknown, defaulting to 1000 [ 1504.946858][ T3866] fuse: Bad value for 'fd' [ 1505.846887][ T30] audit: type=1804 audit(6048055749.353:304): pid=3904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7946" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1506.857347][ T3926] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1506.863912][ T3926] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1506.872818][ T3926] vhci_hcd vhci_hcd.0: Device attached [ 1507.064987][ T982] vhci_hcd: vhci_device speed not set [ 1507.128088][ T982] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1507.159098][ T3947] netlink: 'syz.4.7955': attribute type 10 has an invalid length. [ 1507.213761][ T3947] macvlan1: entered allmulticast mode [ 1507.242251][ T3947] veth1_vlan: entered allmulticast mode [ 1507.253126][ T3947] team0: Port device macvlan1 added [ 1507.696502][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7964'. [ 1507.707203][ T30] audit: type=1804 audit(6048055751.093:305): pid=3983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7964" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1507.866153][ T3927] vhci_hcd: connection reset by peer [ 1507.884412][ T3550] vhci_hcd: stop threads [ 1507.890188][ T3550] vhci_hcd: release socket [ 1507.896638][ T3550] vhci_hcd: disconnect device [ 1509.015754][ T4022] wlan1 speed is unknown, defaulting to 1000 [ 1510.627640][ T4056] netlink: 'syz.5.7988': attribute type 1 has an invalid length. [ 1511.482737][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1511.489138][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1511.549188][ T4073] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7993'. [ 1511.568761][ T4073] /dev/rnullb0: Can't open blockdev [ 1511.749247][ T4077] netlink: 'syz.4.7995': attribute type 33 has an invalid length. [ 1511.757487][ T4077] netlink: 160 bytes leftover after parsing attributes in process `syz.4.7995'. [ 1511.880073][ T30] audit: type=1804 audit(6048055754.994:306): pid=4082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7997" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1512.605733][ T982] vhci_hcd: vhci_device speed not set [ 1512.986780][ T4106] ./file0: Can't lookup blockdev [ 1516.934520][ T30] audit: type=1804 audit(6048055759.727:307): pid=4152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8018" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1518.925618][ T4183] netlink: 'syz.5.8026': attribute type 2 has an invalid length. [ 1519.153211][ T30] audit: type=1804 audit(6048055761.794:308): pid=4195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8031" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1519.164584][ T4195] pimreg: entered allmulticast mode [ 1519.186875][ T4195] pimreg: left allmulticast mode [ 1519.330235][ T4203] fuse: Unknown parameter '0x0000000000000003' [ 1519.401164][ T4206] wlan1 speed is unknown, defaulting to 1000 [ 1519.651379][ T4212] block nbd4: Attempted send on invalid socket [ 1519.657848][ T4212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1519.666978][ T4212] FAT-fs (nbd4): unable to read boot sector [ 1520.314571][ T4220] /dev/rnullb0: Can't open blockdev [ 1520.332183][ T4224] /dev/rnullb0: Can't lookup blockdev [ 1520.589851][ T4243] overlayfs: failed to clone upperpath [ 1520.699456][ T4232] 9p: Unknown parameter 'k' [ 1521.227754][ T4263] rdma_rxe: rxe_newlink: failed to add wlan1 [ 1521.256567][ T4263] /dev/rnullb0: Can't lookup blockdev [ 1521.387699][ T4279] netlink: 'syz.4.8058': attribute type 29 has an invalid length. [ 1521.398719][ T4279] netlink: 'syz.4.8058': attribute type 29 has an invalid length. [ 1521.415995][ T4279] netlink: 500 bytes leftover after parsing attributes in process `syz.4.8058'. [ 1521.443120][ T4282] netlink: 'syz.5.8057': attribute type 21 has an invalid length. [ 1521.464525][ T4282] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8057'. [ 1521.506318][ T4282] netlink: 'syz.5.8057': attribute type 5 has an invalid length. [ 1521.535456][ T4282] netlink: 'syz.5.8057': attribute type 6 has an invalid length. [ 1521.559430][ T4282] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8057'. [ 1522.141841][ T4317] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1522.154432][ T4317] /dev/rnullb0: Can't open blockdev [ 1522.389138][ T4325] netlink: 660 bytes leftover after parsing attributes in process `syz.5.8073'. [ 1522.442060][ T4325] netlink: 660 bytes leftover after parsing attributes in process `syz.5.8073'. [ 1522.513183][T31393] Bluetooth: hci4: unexpected event for opcode 0x204e [ 1523.146870][ T4343] netlink: 'syz.5.8078': attribute type 63 has an invalid length. [ 1523.155076][ T4343] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8078'. [ 1523.166466][ T30] audit: type=1804 audit(6048055765.554:309): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8078" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1523.276252][ T4350] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1523.286092][ T4350] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1523.292825][ T4350] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1523.299457][ T4350] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1523.306083][ T4350] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1523.319754][ T4350] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 1523.327050][ T4350] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1523.333668][ T4350] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 1523.342615][ T4350] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1523.350791][ T4350] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1523.357591][ T4350] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1523.364379][ T4350] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1523.372619][ T4350] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1523.380015][ T4350] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1523.386546][ T4350] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1523.393709][ T4350] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1523.401230][ T4350] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1523.407837][ T4350] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 1523.414481][ T4350] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 1523.422451][ T4350] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1523.429200][ T4350] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 1523.437092][ T4350] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1523.443784][ T4350] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1527.417350][ T4407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8100'. [ 1527.427249][ T4407] tmpfs: Bad value for 'mpol' [ 1527.485722][ T4411] binder: BINDER_SET_CONTEXT_MGR already set [ 1527.491824][ T4411] binder: 4410:4411 ioctl 4018620d 2000000000c0 returned -16 [ 1527.543859][ T4415] /dev/rnullb0: Can't lookup blockdev [ 1527.768269][ T4431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8107'. [ 1527.848858][ T4431] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8107'. [ 1530.103332][ T4465] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8118'. [ 1530.557632][ T4484] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1530.654999][ T4488] netlink: 'syz.5.8125': attribute type 178 has an invalid length. [ 1530.821555][ T4490] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1530.969912][ T4494] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1531.065141][ T4501] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20004 [ 1532.108414][ T4516] netlink: 2 bytes leftover after parsing attributes in process `syz.5.8138'. [ 1533.426389][ T4543] libceph: resolve '4' (ret=-3): failed [ 1533.455271][ T30] audit: type=1804 audit(6048055775.180:310): pid=4543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8146" name="rnullb0" dev="tmpfs" ino=1415 res=1 errno=0 [ 1533.527869][ T4546] kernel read not supported for file /file1 (pid: 4546 comm: syz.5.8147) [ 1533.543785][ T30] audit: type=1800 audit(6048055775.254:311): pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8147" name="file1" dev="mqueue" ino=180214 res=0 errno=0 [ 1534.202070][T15497] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1534.210439][T15497] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1534.225588][T15497] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1534.235582][T15497] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1534.244757][ T2169] bond0: (slave syz_tun): Releasing backup interface [ 1534.244802][T15497] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1534.326080][ T4553] MTD: Couldn't look up '/dev/sg0': -15 [ 1534.468985][T23369] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.481198][ T4550] wlan1 speed is unknown, defaulting to 1000 [ 1534.531049][T23369] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.648957][T23369] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.684082][T31393] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15 [ 1534.691521][T31393] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1534.715613][T23369] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.819860][ T4550] chnl_net:caif_netlink_parms(): no params data found [ 1534.896302][ T4550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.903639][ T4550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.910880][ T4550] bridge_slave_0: entered allmulticast mode [ 1534.918777][ T4550] bridge_slave_0: entered promiscuous mode [ 1534.927779][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.935052][ T4550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.942347][ T4550] bridge_slave_1: entered allmulticast mode [ 1534.949847][ T4550] bridge_slave_1: entered promiscuous mode [ 1534.992617][ T4550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1535.004792][ T4550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1535.025418][T23369] bridge_slave_1: left allmulticast mode [ 1535.031497][T23369] bridge_slave_1: left promiscuous mode [ 1535.037427][T23369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.046083][T23369] bridge_slave_0: left allmulticast mode [ 1535.051809][T23369] bridge_slave_0: left promiscuous mode [ 1535.058018][T23369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.208851][T23369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.246477][T23369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.247939][ T4576] /dev/rnullb0: Can't open blockdev [ 1535.270711][T23369] bond0 (unregistering): (slave team0): Releasing backup interface [ 1535.310097][T23369] bond0 (unregistering): Released all slaves [ 1535.398210][ T4550] team0: Port device team_slave_0 added [ 1535.418803][ T4550] team0: Port device team_slave_1 added [ 1535.486506][ T4550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.500989][ T4550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.554412][ T4550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.587257][ T4550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.594334][ T4550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.661306][ T4550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1535.877761][ T4550] hsr_slave_0: entered promiscuous mode [ 1535.884918][ T4550] hsr_slave_1: entered promiscuous mode [ 1535.910690][ T4550] debugfs: 'hsr0' already exists in 'hsr' [ 1535.916869][ T4550] Cannot create hsr debugfs directory [ 1536.359531][ T4611] netlink: 'syz.7.8162': attribute type 10 has an invalid length. [ 1536.386991][T23369] hsr_slave_0: left promiscuous mode [ 1536.396644][T23369] hsr_slave_1: left promiscuous mode [ 1536.409243][T23369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1536.425263][T23369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1536.434914][T23369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1536.442698][T23369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1536.452794][T31393] Bluetooth: hci7: command tx timeout [ 1536.461076][T23369] veth1_macvtap: left promiscuous mode [ 1536.466840][T23369] veth0_macvtap: left promiscuous mode [ 1536.472414][T23369] veth1_vlan: left promiscuous mode [ 1536.477854][T23369] veth0_vlan: left promiscuous mode [ 1536.608572][T23369] team0 (unregistering): Port device team_slave_1 removed [ 1536.624205][T23369] team0 (unregistering): Port device team_slave_0 removed [ 1536.685452][T23369] team0 (unregistering): Port device dummy0 removed [ 1536.718708][ T4611] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1536.808184][ T4621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1536.941847][ T4630] syzkaller1: entered promiscuous mode [ 1536.951744][ T4630] syzkaller1: entered allmulticast mode [ 1537.219918][ T4550] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1537.234674][ T4550] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1537.248802][ T4550] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1537.259735][ T4550] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1537.362536][ T4550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.381937][ T4550] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.396214][T23369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.403414][T23369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1537.424067][T23360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.431247][T23360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1537.483035][ T4550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1537.496561][ T4550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1537.556696][ T4664] netlink: 'syz.4.8171': attribute type 12 has an invalid length. [ 1537.571277][ T4664] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.8171'. [ 1537.851438][ T4550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.165707][ T4550] veth0_vlan: entered promiscuous mode [ 1538.180264][ T4550] veth1_vlan: entered promiscuous mode [ 1538.214337][ T4550] veth0_macvtap: entered promiscuous mode [ 1538.224815][ T4550] veth1_macvtap: entered promiscuous mode [ 1538.242428][ T4550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1538.257045][ T4550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1538.278871][T23370] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.300123][T23370] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.322373][T23370] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.342265][T23370] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.385318][T23370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1538.403470][T23370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.430239][T23370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1538.438698][T23370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.643166][ T4711] netlink: 'syz.5.8175': attribute type 6 has an invalid length. [ 1538.686934][T31393] Bluetooth: hci7: command tx timeout [ 1539.490221][ T4714] /dev/rnullb0: Can't open blockdev [ 1540.902172][T31393] Bluetooth: hci7: command tx timeout [ 1541.243649][ T4771] /dev/rnullb0: Can't open blockdev [ 1542.082536][ T4848] misc userio: No port type given on /dev/userio [ 1542.107806][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1542.346129][ T4861] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1542.445359][ T10] IPVS: starting estimator thread 0... [ 1542.545000][ T4875] netlink: 'syz.4.8202': attribute type 1 has an invalid length. [ 1542.556801][ T4868] IPVS: using max 37 ests per chain, 88800 per kthread [ 1542.565793][ T4875] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8202'. [ 1543.123609][T31393] Bluetooth: hci7: command tx timeout [ 1543.244385][ T4893] netlink: 'syz.6.8206': attribute type 83 has an invalid length. [ 1544.052643][ T4934] netlink: 'syz.6.8219': attribute type 3 has an invalid length. [ 1544.293517][ T4947] /dev/rnullb0: Can't open blockdev [ 1544.609200][T15497] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1544.617003][T15497] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1544.625634][T15497] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1544.637495][T15497] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1544.645495][T15497] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1544.690430][ T4949] wlan1 speed is unknown, defaulting to 1000 [ 1544.889742][ T4966] sctp: [Deprecated]: syz.5.8232 (pid 4966) Use of int in maxseg socket option. [ 1544.889742][ T4966] Use struct sctp_assoc_value instead [ 1544.948361][ T4971] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1544.960961][ T4971] /dev/rnullb0: Can't open blockdev [ 1544.973242][T23360] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.067758][T23360] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.133944][T23360] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.206883][T23360] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.417395][ T4949] chnl_net:caif_netlink_parms(): no params data found [ 1545.521823][T23360] bridge_slave_1: left allmulticast mode [ 1545.527534][T23360] bridge_slave_1: left promiscuous mode [ 1545.538058][T23360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.557476][T23360] bridge_slave_0: left allmulticast mode [ 1545.566332][T23360] bridge_slave_0: left promiscuous mode [ 1545.575676][T23360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.891673][T23360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1545.912581][ T4983] /dev/rnullb0: Can't open blockdev [ 1545.921597][T23360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1545.968951][T23360] bond0 (unregistering): Released all slaves [ 1546.111754][T23360] tipc: Disabling bearer [ 1546.130973][T23360] tipc: Left network mode [ 1546.137844][ T4949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.160381][ T4949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.170478][ T4949] bridge_slave_0: entered allmulticast mode [ 1546.182074][ T4949] bridge_slave_0: entered promiscuous mode [ 1546.199861][ T4949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.214450][ T4949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.232567][ T4949] bridge_slave_1: entered allmulticast mode [ 1546.240036][ T4949] bridge_slave_1: entered promiscuous mode [ 1546.397892][ T5004] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1546.406870][ T4949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1546.416320][ T5004] /dev/rnullb0: Can't open blockdev [ 1546.443188][ T4949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1546.581831][ T4949] team0: Port device team_slave_0 added [ 1546.607794][ T4949] team0: Port device team_slave_1 added [ 1546.707852][ T4949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1546.731506][ T4949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1546.763299][ T4949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1546.775792][ T4949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1546.798160][ T4949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1546.827353][ T4949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1546.831458][T15497] Bluetooth: hci3: command tx timeout [ 1546.856673][T23360] hsr_slave_0: left promiscuous mode [ 1546.865406][T23360] hsr_slave_1: left promiscuous mode [ 1546.878735][T23360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1546.886303][T23360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1546.895898][T23360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1546.903658][T23360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1546.917728][T23360] veth1_macvtap: left promiscuous mode [ 1546.923379][T23360] veth0_macvtap: left promiscuous mode [ 1546.928988][T23360] veth1_vlan: left promiscuous mode [ 1546.934458][T23360] veth0_vlan: left promiscuous mode [ 1547.061096][T23360] team0 (unregistering): Port device team_slave_1 removed [ 1547.075456][T23360] team0 (unregistering): Port device team_slave_0 removed [ 1547.178697][ T4949] hsr_slave_0: entered promiscuous mode [ 1547.184931][ T4949] hsr_slave_1: entered promiscuous mode [ 1547.192499][ T4949] debugfs: 'hsr0' already exists in 'hsr' [ 1547.199304][ T4949] Cannot create hsr debugfs directory [ 1547.676215][ T4949] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1547.696335][ T4949] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1547.720993][ T4949] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1547.746256][ T4949] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1547.756422][ T5039] /dev/rnullb0: Can't open blockdev [ 1547.866799][ T4949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1547.895614][ T4949] 8021q: adding VLAN 0 to HW filter on device team0 [ 1547.923864][T23363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.930988][T23363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1547.949427][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.956649][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1547.975938][ T5051] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1548.088581][ T5055] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1548.342381][ T4949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1548.798361][ T4949] veth0_vlan: entered promiscuous mode [ 1548.810403][ T4949] veth1_vlan: entered promiscuous mode [ 1548.850926][ T4949] veth0_macvtap: entered promiscuous mode [ 1548.874636][ T4949] veth1_macvtap: entered promiscuous mode [ 1548.892642][ T4949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1548.906306][ T4949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1548.919726][ T3550] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.929087][ T3550] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.945602][ T3550] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.954892][ T3550] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.998382][T23370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.016856][T23370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.024969][T15497] Bluetooth: hci3: command tx timeout [ 1549.044024][ T4618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.052523][ T4618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.129255][ T5102] /dev/rnullb0: Can't open blockdev [ 1549.137944][ T5100] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1549.150246][ T5100] /dev/rnullb0: Can't open blockdev [ 1549.311550][ T5117] /dev/rnullb0: Can't open blockdev [ 1551.248641][T15497] Bluetooth: hci3: command tx timeout [ 1553.472177][T15497] Bluetooth: hci3: command tx timeout [ 1554.801648][ T5182] syzkaller1: left promiscuous mode [ 1554.807062][ T5182] syzkaller1: left allmulticast mode [ 1556.190060][ T5199] /dev/rnullb0: Can't open blockdev [ 1556.786608][ T30] audit: type=1326 audit(6048055796.993:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.6.8283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6e858ebe9 code=0x0 [ 1556.847521][ T5210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1556.864741][ T5210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1556.876214][ T5210] 9p: Bad value for 'wfdno' [ 1557.298569][ T5222] netlink: 'syz.4.8286': attribute type 1 has an invalid length. [ 1557.307693][ T5222] /dev/rnullb0: Can't open blockdev [ 1557.353337][ T5229] syzkaller1: entered promiscuous mode [ 1557.357035][ T5231] ./file0: Can't lookup blockdev [ 1557.358865][ T5229] syzkaller1: entered allmulticast mode [ 1557.403826][ T5234] overlayfs: failed lookup in lower (newroot/511, name='bus', err=-40): overlapping layers [ 1557.439868][ T5235] /dev/rnullb0: Can't open blockdev [ 1561.077361][ T5260] netlink: 'syz.5.8298': attribute type 1 has an invalid length. [ 1561.172429][ T5266] /dev/rnullb0: Can't open blockdev [ 1561.324142][ T5275] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1561.345333][ T5275] /dev/rnullb0: Can't open blockdev [ 1561.720235][ T5286] program syz.7.8306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1562.115404][ T5294] netlink: 'syz.6.8309': attribute type 1 has an invalid length. [ 1562.282963][ T5300] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8311'. [ 1562.295968][ T5300] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8311'. [ 1562.807484][ T5307] netlink: 'syz.6.8315': attribute type 21 has an invalid length. [ 1562.824513][ T5307] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8315'. [ 1562.836558][ T5307] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1562.850405][ T5310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8317'. [ 1562.864802][ T5307] /dev/rnullb0: Can't open blockdev [ 1563.038681][ T5319] netlink: 'syz.6.8320': attribute type 1 has an invalid length. [ 1563.180141][ T5322] ptm ptm45: ldisc open failed (-12), clearing slot 45 [ 1565.858486][ T5368] /dev/rnullb0: Can't open blockdev [ 1565.864504][ T5371] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8336'. [ 1565.916774][ T5369] /dev/rnullb0: Can't open blockdev [ 1566.671325][ T5393] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8343'. [ 1566.683972][ T5393] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1566.697021][ T5393] /dev/rnullb0: Can't open blockdev [ 1567.715202][ T3550] Bluetooth: hci4: Frame reassembly failed (-84) [ 1567.725088][ T5435] tmpfs: Bad value for 'mpol' [ 1567.731392][ T5435] afs: Unknown parameter 'dyn0x0000000000000006' [ 1568.411822][ T5438] /dev/rnullb0: Can't open blockdev [ 1568.439206][ T5436] Bluetooth: hci0: command 0x0406 tx timeout [ 1568.457445][ T5440] /dev/rnullb0: Can't open blockdev [ 1569.632143][ T5451] erofs (device loop4): cannot find valid erofs superblock [ 1569.691320][ T5456] /dev/rnullb0: Can't open blockdev [ 1569.792412][ T5460] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1569.802090][ T5460] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8363'. [ 1569.892938][ T5869] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1569.893059][T15497] Bluetooth: hci4: command 0x1003 tx timeout [ 1571.454784][ T5491] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1571.461853][ T5491] /dev/rnullb0: Can't open blockdev [ 1573.940929][ T5528] syzkaller1: entered promiscuous mode [ 1573.949846][ T5528] syzkaller1: entered allmulticast mode [ 1574.345128][ T5542] kvm: MWAIT instruction emulated as NOP! [ 1574.551781][ T5545] /dev/rnullb0: Can't open blockdev [ 1574.715172][ T5552] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8393'. [ 1574.737847][ T5551] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8393'. [ 1575.065572][ T5558] /dev/rnullb0: Can't open blockdev [ 1576.729106][ T5617] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8417'. [ 1576.823244][ T5624] /dev/rnullb0: Can't lookup blockdev [ 1576.970469][ T5630] fuse: Bad value for 'fd' [ 1577.060645][ T5638] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 1577.078450][ T5639] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8421'. [ 1577.117591][ T5639] netlink: 212 bytes leftover after parsing attributes in process `syz.5.8421'. [ 1577.128859][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8421'. [ 1577.142170][ T5639] fuse: Bad value for 'fd' [ 1577.166477][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1577.173781][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1577.629166][ T5647] can: request_module (can-proto-0) failed. [ 1578.205528][ T5662] sctp: [Deprecated]: syz.5.8431 (pid 5662) Use of int in max_burst socket option. [ 1578.205528][ T5662] Use struct sctp_assoc_value instead [ 1578.270841][ T5673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8432'. [ 1580.495662][ T5728] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1580.503702][ T5728] /dev/rnullb0: Can't open blockdev [ 1581.086135][ T5743] /dev/rnullb0: Can't lookup blockdev [ 1581.134528][ T5745] /dev/rnullb0: Can't lookup blockdev [ 1582.700026][ T5774] /dev/rnullb0: Can't lookup blockdev [ 1583.270741][ T5781] netlink: 'syz.7.8468': attribute type 1 has an invalid length. [ 1583.331333][ T5786] /dev/rnullb0: Can't open blockdev [ 1583.363462][ T5789] /dev/rnullb0: Can't open blockdev [ 1583.776099][ T5803] netlink: 536 bytes leftover after parsing attributes in process `syz.5.8475'. [ 1583.785623][ T5803] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8475'. [ 1585.284746][ T5828] sctp: [Deprecated]: syz.5.8484 (pid 5828) Use of int in max_burst socket option deprecated. [ 1585.284746][ T5828] Use struct sctp_assoc_value instead [ 1586.690583][ T5845] delete_channel: no stack [ 1587.709199][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8497'. [ 1587.739884][ T5870] /dev/rnullb0: Can't open blockdev [ 1588.477372][ T30] audit: type=1804 audit(1495.125:313): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8502" name="rnullb0" dev="tmpfs" ino=428 res=1 errno=0 [ 1588.546055][ T5889] /dev/rnullb0: Can't lookup blockdev [ 1589.147330][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8517'. [ 1589.158107][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8517'. [ 1589.181681][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8514'. [ 1589.234474][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8514'. [ 1589.243735][ T5919] netlink: 'syz.6.8514': attribute type 2 has an invalid length. [ 1589.251522][ T5919] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8514'. [ 1589.262343][ T5919] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1589.269595][ T5919] /dev/rnullb0: Can't open blockdev [ 1589.836043][ T30] audit: type=1326 audit(1496.397:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.5.8523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe64e98ebe9 code=0x0 [ 1590.469104][ T5957] netlink: 'syz.4.8524': attribute type 10 has an invalid length. [ 1590.479388][ T5957] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8524'. [ 1590.766155][ T5960] 9pnet_fd: Insufficient options for proto=fd [ 1590.776166][ T5960] 9pnet_virtio: no channels available for device ./file0 [ 1590.893663][ T30] audit: type=1804 audit(1497.323:315): pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8527" name="rnullb0" dev="tmpfs" ino=428 res=1 errno=0 [ 1591.430819][ T5973] program syz.7.8532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1591.565257][ T5987] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1591.571829][ T5987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1591.586392][ T5987] vhci_hcd vhci_hcd.0: Device attached [ 1591.596704][ T5988] vhci_hcd: connection closed [ 1591.596990][T23360] vhci_hcd: stop threads [ 1591.608798][T23360] vhci_hcd: release socket [ 1591.613310][T23360] vhci_hcd: disconnect device [ 1592.250254][ T6012] /dev/rnullb0: Can't open blockdev [ 1592.305018][ T6014] /dev/sg0: Can't lookup blockdev [ 1592.802133][ T30] audit: type=1804 audit(1499.157:316): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8554" name="rnullb0" dev="tmpfs" ino=428 res=1 errno=0 [ 1592.978662][ T6049] wlan1 speed is unknown, defaulting to 1000 [ 1593.684043][ T30] audit: type=1804 audit(1499.989:317): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8558" name="rnullb0" dev="tmpfs" ino=428 res=1 errno=0 [ 1594.009471][ T6073] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1594.726596][ T6094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1595.801984][ T6115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.848274][ T6115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.456039][ T6122] /dev/rnullb0: Can't lookup blockdev [ 1597.332737][ T6134] /dev/rnullb0: Can't lookup blockdev [ 1597.854594][ T30] audit: type=1326 audit(1503.899:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.4.8590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778b78ebe9 code=0x7fc00000 [ 1598.239584][ T30] audit: type=1804 audit(1504.255:319): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8592" name="rnullb0" dev="tmpfs" ino=428 res=1 errno=0 [ 1599.423118][ T6196] netlink: 168 bytes leftover after parsing attributes in process `syz.5.8605'. [ 1599.440881][ T6196] /dev/rnullb0: Can't lookup blockdev [ 1600.572322][ T5869] Bluetooth: hci7: unknown advertising packet type: 0x65 [ 1600.572353][ T5869] Bluetooth: hci7: Dropping invalid advertising data [ 1600.586486][ T5869] Bluetooth: hci7: unknown advertising packet type: 0x40 [ 1600.586517][ T5869] Bluetooth: hci7: Malformed LE Event: 0x02 [ 1601.850929][ T6236] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1601.900469][ T6238] x_tables: ip_tables: TPROXY.0 target: invalid size 16 (kernel) != (user) 24 [ 1602.572371][ T30] audit: type=1804 audit(1508.305:320): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8624" name="rnullb0" dev="tmpfs" ino=428 res=1 errno=0 [ 1602.710863][ T6261] netlink: 'syz.5.8627': attribute type 4 has an invalid length. [ 1602.932994][ T6280] /dev/rnullb0: Can't open blockdev [ 1603.253391][ T5869] Bluetooth: hci7: ACL packet for unknown connection handle 1 [ 1603.287811][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8637'. [ 1603.356846][ T6288] block nbd4: Attempted send on invalid socket [ 1603.363140][ T6288] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1603.470292][ T6290] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8638'. [ 1604.260847][ T30] audit: type=1804 audit(1509.886:321): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8644" name="rnullb0" dev="tmpfs" ino=428 res=1 errno=0 [ 1604.511380][ T6319] /dev/rnullb0: Can't open blockdev [ 1604.516862][ T6320] /dev/rnullb0: Can't open blockdev [ 1604.554023][ T6323] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8647'. [ 1604.625542][ T6331] binder: 6329:6331 ioctl 40049421 2 returned -22 [ 1604.632352][ T6330] binder: 6329:6330 ioctl 40049421 2 returned -22 [ 1604.696077][ T6330] MTD: Couldn't look up './file0': -15 [ 1604.819493][T12889] IPVS: starting estimator thread 0... [ 1604.829869][ T6340] tipc: Started in network mode [ 1604.834791][ T6340] tipc: Node identity ac1414aa, cluster identity 4711 [ 1604.842437][ T6340] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1604.849821][ T6340] tipc: Enabled bearer , priority 10 [ 1604.861110][ T6340] netlink: 4352 bytes leftover after parsing attributes in process `syz.6.8653'. [ 1604.877958][ T6340] openvswitch: netlink: Flow key attr not present in new flow. [ 1604.909352][ T6345] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8655'. [ 1604.983694][ T6341] IPVS: using max 38 ests per chain, 91200 per kthread [ 1605.000638][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1605.150243][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1605.249023][ T30] audit: type=1804 audit(1510.765:322): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8660" name="rnullb0" dev="tmpfs" ino=428 res=1 errno=0 [ 1605.310851][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1605.342879][T15497] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1605.480959][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1605.627667][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1605.781154][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1605.890920][ T6377] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8665'. [ 1605.930748][ T5950] tipc: Node number set to 2886997162 [ 1605.961582][ T6380] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1605.978062][ T6379] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1606.080345][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1606.155430][T15497] Bluetooth: hci7: command 0x0406 tx timeout [ 1606.379788][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1606.492350][ T6405] wlan1 speed is unknown, defaulting to 1000 [ 1606.681385][ T6406] /dev/rnullb0: Can't lookup blockdev [ 1607.222895][ T6411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8675'. [ 1607.279794][ T6416] overlay: ./file0 is not a directory [ 1607.400582][ T6425] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8680'. [ 1608.046085][ T6433] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8684'. [ 1608.113812][ T30] audit: type=1804 audit(1513.496:323): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8686" name="rnullb0" dev="tmpfs" ino=428 res=1 errno=0 [ 1608.405671][ T30] audit: type=1804 audit(1513.768:324): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8690" name="rnullb0" dev="tmpfs" ino=428 res=1 errno=0 [ 1609.443415][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8694'. [ 1609.520129][ T6468] netlink: 256 bytes leftover after parsing attributes in process `syz.7.8695'. [ 1609.687301][ T6476] rdma_rxe: rxe_newlink: failed to add wlan1 [ 1609.702854][ T6476] /dev/rnullb0: Can't open blockdev [ 1609.825979][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8701'. [ 1609.835166][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8701'. [ 1610.198119][ T6500] /dev/rnullb0: Can't lookup blockdev [ 1610.271224][ C1] net_ratelimit: 3 callbacks suppressed [ 1610.271246][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1611.124231][ T30] audit: type=1804 audit(1516.303:325): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8715" name="rnullb0" dev="tmpfs" ino=428 res=1 errno=0 [ 1611.197627][ T6542] trusted_key: encrypted_key: keylen parameter is missing [ 1611.228564][ T6533] could not allocate digest TFM handle hmac(sha1-avx2) [ 1611.373155][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1612.484178][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1612.686032][ T5869] Bluetooth: hci7: unexpected event for opcode 0x0c6d [ 1612.694110][ T30] audit: type=1326 audit(1517.771:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.5.8719" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe64e98ebe9 code=0x0 [ 1612.715261][ C1] vkms_vblank_simulate: vblank timer overrun [ 1612.766578][ T30] audit: type=1804 audit(1517.846:327): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8720" name="rnullb0" dev="tmpfs" ino=428 res=1 errno=0 [ 1613.036658][ T6576] fuse: Bad value for 'group_id' [ 1613.042023][ T6576] fuse: Bad value for 'group_id' [ 1613.595985][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1614.372288][ T6625] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>鵐v^怃睛秆Kc'Aセ [ 1614.425687][ T6625] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1614.527639][ T6627] netlink: 'syz.4.8746': attribute type 6 has an invalid length. [ 1614.718508][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1614.944033][ T6646] Bluetooth: MGMT ver 1.23 [ 1615.288885][ T30] audit: type=1326 audit(1520.203:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.7.8752" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32ca18ebe9 code=0x0 [ 1615.786733][ T30] audit: type=1804 audit(1520.662:329): pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8754" name="rnullb0" dev="tmpfs" ino=428 res=1 errno=0 [ 1615.804534][ T6686] 9p: Unknown parameter 'rndno90x0000000000000006' [ 1615.819619][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1616.176096][ T6699] /dev/rnullb0: Can't open blockdev [ 1616.850803][ T6721] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1616.931456][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1617.560657][ T6724] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1617.739608][ T6730] rdma_rxe: rxe_newlink: failed to add wlan1 [ 1617.751330][ T6730] /dev/rnullb0: Can't open blockdev [ 1617.783640][ T6732] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8774'. [ 1618.043290][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1618.470916][ T5869] Bluetooth: hci0: command 0x0406 tx timeout [ 1619.117916][ T6751] rdma_rxe: rxe_newlink: failed to add wlan1 [ 1619.128410][ T6751] /dev/rnullb0: Can't open blockdev [ 1619.155087][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1619.204497][ T6755] MTD: Couldn't look up '/dev/sg0': -15 [ 1619.244716][ T6757] netlink: 'syz.4.8784': attribute type 46 has an invalid length. [ 1619.566866][ T6771] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1619.734924][ T6777] tipc: Enabled bearer , priority 10 [ 1619.824177][ T6779] ieee802154 phy0 wpan0: encryption failed: -22 [ 1619.831205][ T6779] /dev/rnullb0: Can't open blockdev [ 1620.075314][ T30] audit: type=1804 audit(1524.684:330): pid=6796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8797" name="rnullb0" dev="tmpfs" ino=428 res=1 errno=0 [ 1620.201619][ T30] audit: type=1804 audit(1524.796:331): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8800" name="rnullb0" dev="tmpfs" ino=428 res=1 errno=0 [ 1620.220871][ C0] vkms_vblank_simulate: vblank timer overrun [ 1620.267144][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1620.819307][ T6856] 9pnet: p9_errstr2errno: server reported unknown error 滰c [ 1620.940579][ T3424] tipc: Node number set to 2505792457 [ 1621.152210][ T6868] netlink: 100 bytes leftover after parsing attributes in process `syz.5.8819'. [ 1621.389464][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1621.542419][ T6874] /dev/rnullb0: Can't open blockdev [ 1621.596309][ C1] ------------[ cut here ]------------ [ 1621.601873][ C1] WARNING: ./include/linux/skbuff.h:1165 at nf_reject_fill_skb_dst+0x2a4/0x330, CPU#1: syz.4.8823/6876 [ 1621.613007][ C1] Modules linked in: [ 1621.616966][ C1] CPU: 1 UID: 0 PID: 6876 Comm: syz.4.8823 Not tainted syzkaller #0 PREEMPT(full) [ 1621.626323][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1621.636873][ C1] RIP: 0010:nf_reject_fill_skb_dst+0x2a4/0x330 [ 1621.643164][ C1] Code: 8b 0d 90 6d c4 08 48 3b 8c 24 e0 00 00 00 75 5d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 1d 7c 9f f7 90 <0f> 0b 90 e9 38 ff ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 2b fe [ 1621.662870][ C1] RSP: 0018:ffffc90000a08360 EFLAGS: 00010246 [ 1621.669482][ C1] RAX: ffffffff8a2152b3 RBX: ffff888024098640 RCX: ffff88803076bc00 [ 1621.677607][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1621.685668][ C1] RBP: ffffc90000a08490 R08: ffffffff8fe52d37 R09: 1ffffffff1fca5a6 [ 1621.693737][ C1] R10: dffffc0000000000 R11: fffffbfff1fca5a7 R12: ffff888056958101 [ 1621.702087][ C1] R13: dffffc0000000001 R14: 1ffff92000141070 R15: 0000000000000000 [ 1621.710122][ C1] FS: 00007f778c6b36c0(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 1621.719089][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1621.725765][ C1] CR2: 000000110c2e06aa CR3: 000000004f084000 CR4: 00000000003526f0 [ 1621.733802][ C1] Call Trace: [ 1621.737118][ C1] [ 1621.740000][ C1] ? __pfx_nf_reject_fill_skb_dst+0x10/0x10 [ 1621.745993][ C1] ? ktime_get+0x3e/0x1f0 [ 1621.750365][ C1] ? lock_release+0x4b/0x3e0 [ 1621.755039][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1621.761323][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1621.768002][ C1] nf_send_unreach+0x17b/0x6e0 [ 1621.772809][ C1] ? __pfx_nf_send_unreach+0x10/0x10 [ 1621.778178][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1621.783337][ C1] ? rcu_is_watching+0x15/0xb0 [ 1621.788197][ C1] nft_reject_inet_eval+0x4bc/0x690 [ 1621.793442][ C1] nft_do_chain+0x40c/0x1920 [ 1621.798106][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1621.803169][ C1] ? ktime_get+0x3e/0x1f0 [ 1621.807884][ C1] ? packet_rcv_fanout+0x57d/0x720 [ 1621.813068][ C1] nft_do_chain_inet+0x25d/0x340 [ 1621.818098][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1621.823594][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1621.827833][ C1] ? rcu_is_watching+0x15/0xb0 [ 1621.832636][ C1] ? lock_acquire+0x5f/0x360 [ 1621.837253][ C1] ? ip_sabotage_in+0x57/0x270 [ 1621.842090][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1621.847584][ C1] nf_hook_slow+0xc5/0x220 [ 1621.852098][ C1] NF_HOOK+0x206/0x3a0 [ 1621.856203][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1621.861414][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1621.865604][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1621.870252][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 1621.874945][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1621.880111][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1621.884698][ C1] __netif_receive_skb+0x143/0x380 [ 1621.889863][ C1] ? process_backlog+0x2d5/0x14f0 [ 1621.895090][ C1] process_backlog+0x60e/0x14f0 [ 1621.899991][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1621.905382][ C1] ? trace_rcu_utilization+0x47/0x1d0 [ 1621.910803][ C1] ? rcu_core+0x1339/0x1770 [ 1621.915381][ C1] __napi_poll+0xc4/0x360 [ 1621.919746][ C1] ? rcu_is_watching+0x15/0xb0 [ 1621.924589][ C1] net_rx_action+0x707/0xe30 [ 1621.929220][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1621.934399][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1621.939684][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1621.945025][ C1] handle_softirqs+0x283/0x870 [ 1621.949886][ C1] ? do_softirq+0xec/0x180 [ 1621.954342][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1621.959715][ C1] ? dev_loopback_xmit+0x2f6/0x490 [ 1621.964874][ C1] do_softirq+0xec/0x180 [ 1621.969214][ C1] [ 1621.972179][ C1] [ 1621.975143][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1621.980066][ C1] ? rcu_is_watching+0x15/0xb0 [ 1621.984877][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 1621.990151][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1621.995927][ C1] ? rcu_is_watching+0x15/0xb0 [ 1622.000752][ C1] ? dev_loopback_xmit+0x2f6/0x490 [ 1622.006768][ C1] dev_loopback_xmit+0x327/0x490 [ 1622.011768][ C1] ip_mc_output+0x25c/0x590 [ 1622.016315][ C1] ip_send_skb+0x74/0x100 [ 1622.020696][ C1] udp_send_skb+0xaf1/0x14c0 [ 1622.025320][ C1] udp_sendmsg+0x6db/0x2170 [ 1622.029863][ C1] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1622.035305][ C1] ? __futex_wait+0x1d1/0x3e0 [ 1622.040014][ C1] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1622.045641][ C1] ? __pfx_udp_sendmsg+0x10/0x10 [ 1622.050637][ C1] ? futex_private_hash_get+0x43/0x290 [ 1622.056242][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 1622.061145][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1622.067648][ C1] ? sock_rps_record_flow+0x19/0x410 [ 1622.072974][ C1] ? inet_sendmsg+0x29c/0x370 [ 1622.077703][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1622.083121][ C1] __sock_sendmsg+0x19c/0x270 [ 1622.087857][ C1] __sys_sendto+0x3bd/0x520 [ 1622.092392][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1622.097497][ C1] ? do_futex+0x333/0x420 [ 1622.101891][ C1] __x64_sys_sendto+0xde/0x100 [ 1622.106703][ C1] do_syscall_64+0xfa/0xfa0 [ 1622.111244][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.117349][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1622.122051][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.128021][ C1] RIP: 0033:0x7f778b78ebe9 [ 1622.132472][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1622.152160][ C1] RSP: 002b:00007f778c6b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1622.160662][ C1] RAX: ffffffffffffffda RBX: 00007f778b9c5fa0 RCX: 00007f778b78ebe9 [ 1622.168654][ C1] RDX: 0000000000000003 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1622.176689][ C1] RBP: 00007f778b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1622.184728][ C1] R10: 0000000004004884 R11: 0000000000000246 R12: 0000000000000000 [ 1622.192799][ C1] R13: 00007f778b9c6038 R14: 00007f778b9c5fa0 R15: 00007ffcb9bc54d8 [ 1622.200834][ C1] [ 1622.203949][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1622.211268][ C1] CPU: 1 UID: 0 PID: 6876 Comm: syz.4.8823 Not tainted syzkaller #0 PREEMPT(full) [ 1622.220680][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1622.230779][ C1] Call Trace: [ 1622.234188][ C1] [ 1622.237055][ C1] dump_stack_lvl+0x99/0x250 [ 1622.241670][ C1] ? __asan_memcpy+0x40/0x70 [ 1622.246274][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1622.251489][ C1] ? __pfx__printk+0x10/0x10 [ 1622.256100][ C1] vpanic+0x281/0x750 [ 1622.260102][ C1] ? __pfx_vpanic+0x10/0x10 [ 1622.264609][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1622.269894][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1622.275098][ C1] panic+0xb9/0xc0 [ 1622.278844][ C1] ? __pfx_panic+0x10/0x10 [ 1622.283283][ C1] __warn+0x334/0x4c0 [ 1622.287364][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 1622.292953][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 1622.298512][ C1] report_bug+0x2be/0x4f0 [ 1622.302940][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 1622.308488][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 1622.314037][ C1] ? nf_reject_fill_skb_dst+0x2a6/0x330 [ 1622.319649][ C1] handle_bug+0x84/0x160 [ 1622.323908][ C1] exc_invalid_op+0x1a/0x50 [ 1622.328414][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1622.333273][ C1] RIP: 0010:nf_reject_fill_skb_dst+0x2a4/0x330 [ 1622.339527][ C1] Code: 8b 0d 90 6d c4 08 48 3b 8c 24 e0 00 00 00 75 5d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 1d 7c 9f f7 90 <0f> 0b 90 e9 38 ff ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 2b fe [ 1622.359145][ C1] RSP: 0018:ffffc90000a08360 EFLAGS: 00010246 [ 1622.365234][ C1] RAX: ffffffff8a2152b3 RBX: ffff888024098640 RCX: ffff88803076bc00 [ 1622.373210][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1622.381186][ C1] RBP: ffffc90000a08490 R08: ffffffff8fe52d37 R09: 1ffffffff1fca5a6 [ 1622.389162][ C1] R10: dffffc0000000000 R11: fffffbfff1fca5a7 R12: ffff888056958101 [ 1622.397160][ C1] R13: dffffc0000000001 R14: 1ffff92000141070 R15: 0000000000000000 [ 1622.405149][ C1] ? nf_reject_fill_skb_dst+0x2a3/0x330 [ 1622.410734][ C1] ? __pfx_nf_reject_fill_skb_dst+0x10/0x10 [ 1622.416636][ C1] ? ktime_get+0x3e/0x1f0 [ 1622.420984][ C1] ? lock_release+0x4b/0x3e0 [ 1622.425582][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1622.431826][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1622.438430][ C1] nf_send_unreach+0x17b/0x6e0 [ 1622.443201][ C1] ? __pfx_nf_send_unreach+0x10/0x10 [ 1622.448491][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1622.453626][ C1] ? rcu_is_watching+0x15/0xb0 [ 1622.458392][ C1] nft_reject_inet_eval+0x4bc/0x690 [ 1622.463602][ C1] nft_do_chain+0x40c/0x1920 [ 1622.468221][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1622.473250][ C1] ? ktime_get+0x3e/0x1f0 [ 1622.477592][ C1] ? packet_rcv_fanout+0x57d/0x720 [ 1622.482714][ C1] nft_do_chain_inet+0x25d/0x340 [ 1622.487656][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1622.493122][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1622.497296][ C1] ? rcu_is_watching+0x15/0xb0 [ 1622.502067][ C1] ? lock_acquire+0x5f/0x360 [ 1622.506675][ C1] ? ip_sabotage_in+0x57/0x270 [ 1622.511468][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1622.516954][ C1] nf_hook_slow+0xc5/0x220 [ 1622.521396][ C1] NF_HOOK+0x206/0x3a0 [ 1622.525502][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1622.530626][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1622.534796][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1622.539396][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 1622.544000][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1622.549126][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1622.553639][ C1] __netif_receive_skb+0x143/0x380 [ 1622.558760][ C1] ? process_backlog+0x2d5/0x14f0 [ 1622.563792][ C1] process_backlog+0x60e/0x14f0 [ 1622.568673][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1622.573966][ C1] ? trace_rcu_utilization+0x47/0x1d0 [ 1622.579344][ C1] ? rcu_core+0x1339/0x1770 [ 1622.583872][ C1] __napi_poll+0xc4/0x360 [ 1622.588208][ C1] ? rcu_is_watching+0x15/0xb0 [ 1622.592977][ C1] net_rx_action+0x707/0xe30 [ 1622.597580][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1622.602704][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1622.607915][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1622.613229][ C1] handle_softirqs+0x283/0x870 [ 1622.618012][ C1] ? do_softirq+0xec/0x180 [ 1622.622436][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1622.627730][ C1] ? dev_loopback_xmit+0x2f6/0x490 [ 1622.632847][ C1] do_softirq+0xec/0x180 [ 1622.637095][ C1] [ 1622.640032][ C1] [ 1622.642966][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1622.647826][ C1] ? rcu_is_watching+0x15/0xb0 [ 1622.652594][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 1622.657798][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1622.663520][ C1] ? rcu_is_watching+0x15/0xb0 [ 1622.668290][ C1] ? dev_loopback_xmit+0x2f6/0x490 [ 1622.673504][ C1] dev_loopback_xmit+0x327/0x490 [ 1622.678448][ C1] ip_mc_output+0x25c/0x590 [ 1622.682981][ C1] ip_send_skb+0x74/0x100 [ 1622.687312][ C1] udp_send_skb+0xaf1/0x14c0 [ 1622.691916][ C1] udp_sendmsg+0x6db/0x2170 [ 1622.696449][ C1] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1622.701868][ C1] ? __futex_wait+0x1d1/0x3e0 [ 1622.706644][ C1] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1622.712290][ C1] ? __pfx_udp_sendmsg+0x10/0x10 [ 1622.717329][ C1] ? futex_private_hash_get+0x43/0x290 [ 1622.722813][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 1622.727693][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1622.734148][ C1] ? sock_rps_record_flow+0x19/0x410 [ 1622.739448][ C1] ? inet_sendmsg+0x29c/0x370 [ 1622.744143][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1622.749447][ C1] __sock_sendmsg+0x19c/0x270 [ 1622.754163][ C1] __sys_sendto+0x3bd/0x520 [ 1622.758696][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1622.768273][ C1] ? do_futex+0x333/0x420 [ 1622.772646][ C1] __x64_sys_sendto+0xde/0x100 [ 1622.777415][ C1] do_syscall_64+0xfa/0xfa0 [ 1622.782543][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.788610][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1622.793290][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.799184][ C1] RIP: 0033:0x7f778b78ebe9 [ 1622.803609][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1622.823216][ C1] RSP: 002b:00007f778c6b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1622.831634][ C1] RAX: ffffffffffffffda RBX: 00007f778b9c5fa0 RCX: 00007f778b78ebe9 [ 1622.839697][ C1] RDX: 0000000000000003 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1622.847678][ C1] RBP: 00007f778b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1622.855655][ C1] R10: 0000000004004884 R11: 0000000000000246 R12: 0000000000000000 [ 1622.863625][ C1] R13: 00007f778b9c6038 R14: 00007f778b9c5fa0 R15: 00007ffcb9bc54d8 [ 1622.871610][ C1] [ 1622.874914][ C1] Kernel Offset: disabled [ 1622.879245][ C1] Rebooting in 86400 seconds..