last executing test programs: 7.213599804s ago: executing program 1 (id=74): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000000)={{@my=0x0, 0x200}, @any, 0x3, 0xffffffffffffffff, 0x7ff, 0x2, 0x100000000, 0x10001, 0x8}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x404280, 0x0) close(r1) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f00000000c0)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x29) fremovexattr(r1, &(0x7f0000000100)=@random={'btrfs.', '\\&\x00'}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x20, 0x23, 0xe4, {0xe4, 0x11, "442840e6dd3aa9b9c92d1eed0a45e0a471e71e674104530ed877bdd06e11760a87917d36662c7cedd029fd5ff9ca6b67d72c7d3270e68e3c146681131cd569bc473b840a30686cfde9e222bd71d558a9e78a9d27d31806ae4290f8b961343bd10b166b591b6c876a649f1a211b425e7b7b8fdd10949340c2e7207adbb5894ecc062eaf136e87b9dd45b060073eb0285ffc71b6aa875b241f359c451d2b329e0a8b36eefb80254fc477aaf10786467b7882537eff339b8c3497906079229aeba238f91cd4caf71e7a2bcb76be686866686b36e20c327ec8147728171e96c8b32c04cc"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x40, 0x7, 0xac, "76a0fc0a88e3bbfe1bc001b457f676a7d3d7a41c3d25798d6a22775149468c78a9269206921911b75c49aa7a0a203bc218dfd611127c91a017d0e4aaa6e2c4b7ee19fa42a7a9401be4b3de8f307bb073319b766391ce2476078c9066a13d247b429119ecfaea93785f90dfab2afc03960863468151771991ccd0939e6938ee79300878e9e7dcf00f697b40253260d66733a2f8956d9adebdd9b67a37fff5b663a802afb8692655fa6bc535e1"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x63}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x8, 0x800, 0x85c, 0x62, 0x1, 0x7, 0x7, 0x3, 0x68, 0x7, 0xfff, 0x62e6}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000500)={0x20, 0x89, 0x2, 0x1}}) ioctl$int_in(r1, 0x5421, &(0x7f00000005c0)=0x3) accept4(r1, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000680)=0x80, 0x800) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000006c0)=0xa0000) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000700)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x4, 0x400, @l2={'ib', 0x3a, 'dvmrp0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80c0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000ac0)) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000b40)) getsockopt(r1, 0x400, 0xaf1, &(0x7f0000000b80)=""/61, &(0x7f0000000bc0)=0x3d) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000c00)) r4 = socket$isdn_base(0x22, 0x3, 0x0) close_range(r4, r1, 0x0) bind$bt_hci(r1, &(0x7f0000000c80)={0x1f, 0x2}, 0x6) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d40)={0x18c, r5, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x48}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x55d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe77d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "15d008135b0e33a39f282459cdcf4b6d8e00325d914a11021770d5da"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "6342e0b154483114c87c86dd1f9e898c4f405ecc28a12192da3a60689371709dea49e7"}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$KVM_RUN(r1, 0xae80, 0x0) r6 = syz_io_uring_setup(0x2aa, &(0x7f0000000f80)={0x0, 0x6e3b, 0x200, 0x1, 0x1f}, &(0x7f0000001000), &(0x7f0000001040)) writev(r6, &(0x7f0000001280)=[{&(0x7f0000001080)="9a27eab4e02f245855ff3cdb1679324697d7021ade031ff008cb0df59bd81d95ec143e1d903f5ad9562639a73cb050e4f4d501f0031f29411a73ab6dbf40f447834416d2eee2f9c9937b718f3866f3a07dd8dac23d6f5b5e00891d395d48259feb34de3872a3400b5f07c14c46ed875fcc694dceea1383a648284ffe8af904dc85c382b9830296e9ed0f3649f39ed9dee7bbe0d05d26353c3cf732ad689960fd775c2c8ad4447a5df7792aac7d97b3b5e1899192de4424fa9783e9a323c0a72fa15e6a38410661a68be8e2a182ad95", 0xcf}, {&(0x7f0000001180)="49e4ab04a52bbbff13be79056eb844fbd4af5685ff84a1c1e1faf94f4ad5473b665617ce04c513f42ea37019ff190fc32a62f200e928b7e74aa652a6c2b5855c93bee6c322b4106e06069064fc0102d084a6d4ad64585e64303218ee559b04de6dcddd94936115595bc18bfb169555562729201d41374751a9b7b06a7f529b2abc93f9a70bec254ebbc782a16e48fce27e860c079d12bdec6444a918e14a883839fa9488e01a99139474d3faa43e9a63ba7f8c1f8d2ddf50fb2a4bf80dd06ae75be4c3a0933b2cdfd8ffac6e99ebba4dcb5e61372d9e3571e53ce213d4dd12476540e5e2771efd209d837a4de22143e1bcee24285626", 0xf6}], 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000012c0)={{0x1, 0x2, 0x9, 0x2, 0x5}, 0x2, 0x1}) 6.582936687s ago: executing program 1 (id=78): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x24, r3, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4880) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = socket(0x2a, 0x2, 0x5) sendto(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @pic={0xd8, 0xff, 0x4, 0x40, 0x7f, 0xff, 0x7, 0x7f, 0x1, 0x4, 0x4, 0x3, 0xf, 0x7f, 0x2, 0xe2}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000340)={[0x6, 0x800000000000000, 0x10, 0x1, 0xf4, 0x1, 0x0, 0x3, 0x7f, 0x4400000000000004, 0x6, 0x7ff, 0x8396, 0x200, 0x9, 0x3], 0xeeee0000, 0xd7c6}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x907f2000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) 5.435506762s ago: executing program 1 (id=83): write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000001080)=0xfff, 0xfff) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0xffffc000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={0x0, 0x7d6f, 0x1, [0xffff, 0x0, 0x5, 0x0, 0x100000000], [0xe000000, 0x5a, 0x101, 0x80, 0xcc6, 0x3, 0x100000001, 0xa, 0x7fffffffffffffff, 0x100, 0x8, 0x401, 0x5, 0x100, 0xfffffffffffffe00, 0xc3ae, 0x600000000, 0x1ff, 0x2d80000000000, 0x4, 0x3, 0x1, 0x2, 0xff, 0xa, 0x4, 0x100, 0x1, 0xfffffffffffffffe, 0x0, 0x166, 0x4, 0x8, 0x0, 0x8, 0x5, 0xe, 0x5e4, 0x5, 0x1, 0x6c, 0x8, 0x5, 0xfff, 0x3cecc49a, 0x7fff, 0x6, 0x4, 0x1, 0x1, 0xa, 0x0, 0x7fff, 0x8, 0x400, 0x1, 0x5, 0x4, 0x2, 0x6, 0xb4, 0x7fff, 0x0, 0x4, 0x2, 0xfffffffffffffff9, 0x3ff, 0x1, 0x0, 0x80000001, 0xffffffff, 0xeb, 0x0, 0xd6c0, 0x80000000, 0x401, 0x3, 0x0, 0x8000000000000001, 0x6, 0x3, 0x3, 0x7, 0xc4, 0x0, 0x8000000000000000, 0x2, 0x8, 0x2, 0x3000000000, 0x9, 0x1, 0x2, 0x401, 0x6, 0x80000001, 0x3, 0x80, 0x6, 0x7, 0x4, 0x2, 0x40, 0x6, 0x7a, 0x6, 0x4, 0x6, 0x6, 0x2, 0x7, 0x4a4, 0x80a, 0x0, 0x0, 0x7, 0x10000000000000, 0xfffffffffffffe00, 0x8f, 0xffffffffffffffff, 0x5]}) syz_usb_connect(0x2, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff09050c02200006060309050710003e8fad67020102070824"], 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 4.39071932s ago: executing program 0 (id=87): r0 = geteuid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setreuid(r0, r2) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0xc) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir}]}) ioprio_set$uid(0x3, 0x0, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000180)="e370d6", 0x3}], 0x1) 4.355830504s ago: executing program 0 (id=89): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10040084}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x77359400}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x7c5c7000) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x1, @default, @bpq0, 0x2, 'syz1\x00', @default, 0x2, 0x0, [@bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, r6, 0x7}}, 0x48) ioprio_set$pid(0x1, 0x0, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigqueueinfo(r8, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000666000/0x3000)=nil) sendfile(r7, r7, 0x0, 0x7ffff000) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0x8008f513, &(0x7f0000000040)) 4.313973232s ago: executing program 0 (id=90): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/freeze_filesystems', 0x0, 0x0) read$nci(r0, &(0x7f0000000680)=""/88, 0x58) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x3, 0x0, {0x3, 0x0, 0x6, 0x2, 0x1}, 0xa}) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r2, r1, 0x0, 0x7fffefff) mkdir(&(0x7f0000000100)='./file0\x00', 0x91) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r4 = fanotify_init(0x8, 0x0) fanotify_mark(r4, 0x1, 0x8000020, r3, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x189000, 0xa8) preadv(r5, 0x0, 0x0, 0x15f, 0x0) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r7 = getegid() (rerun: 64) fchown(r0, r6, r7) (async, rerun: 32) r8 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x40, 0x1405, 0x403, 0x70bd28, 0x25dfdc00, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0xfffffffc}}, {{0x62}, {0x8, 0x3, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r10, 0x4068aea3, &(0x7f0000000140)) (async) sendfile(r1, r1, 0x0, 0x7ffff000) 4.213786251s ago: executing program 0 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="6d706f6c3d62a46e643a2c0000fe37c0868062e033c2fd1016abc8a9de498de13967d9b6a06c4a155d015de7bbe8e1b808697603f2aeecb74aa74e7bc9d3b14ba0ae873cce95dc877b7c8006ec34029705c4abc9e94d999f554f1eb6e00c3e76d1c619fa93ef49ef476e540bbdb4b111ade5f4867793f3a5873710636677d420e4905792"]) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 3.904971391s ago: executing program 1 (id=98): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000f80), 0x1, 0x2) read(r0, &(0x7f0000000480)=""/19, 0x11) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x18008a8, &(0x7f0000000040)={[], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x8000, 0x50) getdents64(r1, &(0x7f0000000740)=""/243, 0xf3) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905850140000000000905f3"], 0x0) getdents(r1, &(0x7f0000000240)=""/155, 0x9b) mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fsc']) creat(&(0x7f0000001380)='./file0\x00', 0x12c) mount(&(0x7f0000001400)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='.\x00', &(0x7f0000000100)='cgroup\x00', 0x8002, 0x0) 3.859758884s ago: executing program 2 (id=99): arch_prctl$ARCH_SET_GS(0x1001, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000012c0)={{0x12, 0x1, 0x300, 0xb8, 0x92, 0x1a, 0x20, 0x545, 0x8080, 0x301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0xff, 0x0, 0x4, [{{0x9, 0x4, 0x3b, 0xff, 0x0, 0x87, 0x24, 0x98, 0x6}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x4, 0xc, 0x7c242628, 0xff, 0x8001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 3.258555767s ago: executing program 0 (id=101): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0x401070c9, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r1) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x7fff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_channels={0x50, 0x1, 0x8000000, 0x1, 0xafa, 0x4, 0x6, 0xd, 0x8}}) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xfb}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 3.183397952s ago: executing program 3 (id=102): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open(0x0, 0x0, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xe8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xb2, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @val={0x5, 0x7e, {0x5, 0x3a, 0x9, "acfcba433d50dd18b3c5a98000366103e139ff3725d3d54ddf27ea7fc6d5888b43d116b26cdf5d9abe11984c043e77e4dea424039488f461254cc023653cb811e79d6066468693761d98e9062d0db4786f19c05fd369411421f6e702199d3f08b46443bc01e400e092b061afcecbb8ccc2b385c9253971cec083e3"}}, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x6, 0x35, 0x9}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0xe8}}, 0x40810) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1e984a15, 0x202812, r0, 0x7dfff000) 2.892791843s ago: executing program 3 (id=103): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x59327139ae2673af, 0x12, r0, 0x57789000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x9}}) close(0x3) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x3f9, 0x800, 0x70bd28, 0x25dfdbfe, {0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x200440c1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x11) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.642738063s ago: executing program 3 (id=104): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fcntl$setstatus(r2, 0x4, 0x800) sendfile(r0, r0, 0x0, 0x7ffff000) 2.410784721s ago: executing program 2 (id=105): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f0000000040)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0xb, &(0x7f0000000080)={0x0, 0x10, 0x2}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fspick(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffff9]}, 0x8) read(r5, &(0x7f0000000740)=""/377, 0x179) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}, @ib={0x1b, 0x1, 0x0, {"15a82a35c72b55077ec82827906f7f19"}, 0x8001, 0x7, 0x7}}}, 0x118) sendfile(r1, r1, 0x0, 0x7ffff000) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @loopback}, {0xa, 0x4e21, 0x101, @mcast2, 0x7}, r10, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r10, r9}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r10}}, 0xc) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2.169114317s ago: executing program 0 (id=106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed9bebbbd, 0xa0011, r2, 0x52fbb000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed9bebbbd, 0xa0011, r2, 0x52fbb000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) inotify_init1(0x80000) (async) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000040)='./bus\x00', 0x44) (async) inotify_add_watch(r3, &(0x7f0000000040)='./bus\x00', 0x44) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0xe, 0x9, 0x691e, 0xb}}) (async) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0xe, 0x9, 0x691e, 0xb}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r5 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010080000904000001020dec000524060001052400ff7f0d240f010500000000000000f906241a0000000905810300020000ff0904010000020d00000904010102020d0000090582022000000101090503020000000700"], 0x0) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) bind$packet(r6, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x4}, 0x14) (async) bind$packet(r6, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x4}, 0x14) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x209, 0x8, 0x1000, 0x1, 0x10, 0x10, 0xe, 0x800, 0x2, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') write$cgroup_pid(r7, &(0x7f0000000380), 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 1.730769524s ago: executing program 3 (id=107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0x5000, 0x118000}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) times(&(0x7f0000000140)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) 1.45484767s ago: executing program 2 (id=108): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x641, 0x1019, r2, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='aufs\x00', 0x2018021, 0x0) 1.37325783s ago: executing program 2 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0xe1}, {{0x0, 0x4d, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f00000007c0)=""/273, 0x111}, {&(0x7f0000000440)=""/88, 0x58}, {&(0x7f0000000900)=""/4093, 0xffd}, {&(0x7f00000005c0)=""/240, 0xf0}, {&(0x7f0000001900)=""/224, 0xe0}], 0x6}, 0x80000000}], 0x4, 0x0, 0x0) 874.718235ms ago: executing program 1 (id=110): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_int(r1, 0x1, 0xb, 0x0, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000000040), 0xbfe, 0x40041) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000080)=0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000000c0)="a1eb64f7b4295acdc7d9eae116a284a8", 0x10) inotify_init() ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x1}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r5, r4, 0x0, 0x7fffefff) 783.096065ms ago: executing program 3 (id=111): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000004c0)=@ethtool_dump={0x40, 0x6, 0x7fffffff}}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001600010000000000000000000a00000000000000140001"], 0x44}}, 0x0) syz_open_dev$I2C(&(0x7f00000001c0), 0xe337, 0x83100) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0x7, 0x1, [0x5]}, &(0x7f0000000180)=0xa) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 686.024558ms ago: executing program 3 (id=112): prlimit64(0x0, 0x9, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4000, 0x2}) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0xa, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x8) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r2}}, './file0\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r3, r8) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000680)=ANY=[@ANYBLOB="085d0d9c46f7897589d45fc17ffa420300000052", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,allow_other,allow_other,dont_measure,dont_hash,fowner>', @ANYRESDEC=r3, @ANYBLOB="2c736d61636b6673666c6f6f723d215b2c21292d275ce6295d285e2c666f776e65723d", @ANYRESDEC=r5, @ANYBLOB=',euid>', @ANYRESDEC=r6, @ANYBLOB="2c7375626a5f757365723d2c646f6e745f61707072616973652c6f626a5f747970653db52a5d7b29242c7569643c", @ANYRESDEC=r8, @ANYBLOB=',\x00']) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x6e, &(0x7f0000000240)=""/110}) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) sendmsg$can_bcm(r9, 0x0, 0x0) io_setup(0x6, 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) io_setup(0x81, &(0x7f0000000480)=0x0) io_getevents(r10, 0x3, 0xa, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000600)={0x77359400}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 458.535781ms ago: executing program 2 (id=113): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}, @CTA_LABELS_MASK={0x4}]}, 0x40}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}, @CTA_LABELS_MASK={0x4}]}, 0x40}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) (async) 51.243373ms ago: executing program 2 (id=114): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x40187014, &(0x7f0000000000)={0x1}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r2) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001180)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40004) (async) r5 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r5, 0x400455c8, 0x2) (async, rerun: 64) ioctl$TIOCSETD(r5, 0x5412, &(0x7f00000003c0)=0xffffffbf) (async, rerun: 64) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 0s ago: executing program 1 (id=115): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005440)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="837648860a5dfc82a052fd9702397eb415d9308a77b2db7e4cb8f4b16328bed8c1ed41e265eec88a50f8d2d90ead2e7fd342ab7e3a6f99504e07253b99e9f99d1cf2f87b3d28ead88c16f413a611c68ff4f2ad5361e11fe9895620b71f245e3e9fd8656e12e71e3670dd47325dee837c2209aef83c8d36f057744441a087249e9a52c22a4c0433e26b45d00ba5d2a0f57d7ea5fbd4a9a2422051ddc763c3455822f936adf00a0a81e1ebc5edbceb3e31a86dd02326", 0xb5}, {&(0x7f0000000700)="6645139124ac07ae1d7233b07a8a1b413ed9d61d0c82f4fed3d2388c54f85578f8e29131888e18d19a7e6680df3f253b792abaa4fc10da1a42127f4e88e9970cda075cbf4fec73d93e189d6f6cedf3eabd0473be669d30c8958e4e0da3e0187f68562ddd285eef44408eba3234482d0fc4dc2e3a172a2497a5311a3875f182f05bf46ab3", 0x84}, {&(0x7f00000000c0)="236802208aba5b29a4ddcd925b0675f499e57e20a5bd56e99bd9240706e114b0", 0x20}], 0x3, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4800}], 0x1, 0x4004000) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000600)=""/134, 0x86}], 0x3}, 0x4}], 0x1, 0x60, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)='westwood\x00', 0x9) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002000)={0x73622a85, 0x0, 0xfffffffffffffffd}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) set_tid_address(0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_hci(r7, 0x0, 0x2, 0x0, 0x0) r8 = mmap$binder(&(0x7f000089a000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0xfffffffffffffeff) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000600)=[@enter_looper, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={@fd, @ptr={0x70742a85, 0x41, &(0x7f0000000440)=""/159, 0x0, 0x2, 0x2d}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000100)}, 0x1000}, @decrefs={0x40046307, 0x1}, @release={0x40046306, 0x3}, @free_buffer={0x40086303, r8}, @clear_death, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r9}, @fda={0x66646185, 0x2, 0x0, 0x2c}}, &(0x7f0000000340)}, 0x400}], 0xfffffffffffffeed, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts. [ 52.285125][ T5847] cgroup: Unknown subsys name 'net' [ 52.415672][ T5847] cgroup: Unknown subsys name 'cpuset' [ 52.422844][ T5847] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.547657][ T5847] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.606368][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.614037][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.621084][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.627408][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.636334][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.643685][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.650846][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.651787][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.658071][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.665914][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.672227][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.686399][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.694972][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.702085][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.702682][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.717265][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.719280][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.731845][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.731850][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.747831][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.976247][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 57.044131][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 57.092037][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 57.150890][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 57.171574][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.179247][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.186668][ T5856] bridge_slave_0: entered allmulticast mode [ 57.193160][ T5856] bridge_slave_0: entered promiscuous mode [ 57.211941][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.219174][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.226570][ T5856] bridge_slave_1: entered allmulticast mode [ 57.233051][ T5856] bridge_slave_1: entered promiscuous mode [ 57.260557][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.267724][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.274951][ T5857] bridge_slave_0: entered allmulticast mode [ 57.281775][ T5857] bridge_slave_0: entered promiscuous mode [ 57.296726][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.308619][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.315821][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.322958][ T5857] bridge_slave_1: entered allmulticast mode [ 57.329617][ T5857] bridge_slave_1: entered promiscuous mode [ 57.339605][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.386858][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.394929][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.402084][ T5859] bridge_slave_0: entered allmulticast mode [ 57.408897][ T5859] bridge_slave_0: entered promiscuous mode [ 57.417396][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.433028][ T5856] team0: Port device team_slave_0 added [ 57.439152][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.446627][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.453849][ T5859] bridge_slave_1: entered allmulticast mode [ 57.460302][ T5859] bridge_slave_1: entered promiscuous mode [ 57.468055][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.484842][ T5856] team0: Port device team_slave_1 added [ 57.490806][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.498037][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.505223][ T5858] bridge_slave_0: entered allmulticast mode [ 57.512167][ T5858] bridge_slave_0: entered promiscuous mode [ 57.538023][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.545332][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.552761][ T5858] bridge_slave_1: entered allmulticast mode [ 57.559834][ T5858] bridge_slave_1: entered promiscuous mode [ 57.598333][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.609455][ T5857] team0: Port device team_slave_0 added [ 57.615992][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.622939][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.649624][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.662068][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.673333][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.684476][ T5857] team0: Port device team_slave_1 added [ 57.697172][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.704305][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.730660][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.743348][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.775977][ T5859] team0: Port device team_slave_0 added [ 57.784132][ T5859] team0: Port device team_slave_1 added [ 57.802212][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.809419][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.835655][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.853985][ T5858] team0: Port device team_slave_0 added [ 57.860722][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.867719][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.893630][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.921166][ T5858] team0: Port device team_slave_1 added [ 57.942932][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.950321][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.976967][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.988359][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.995391][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.021461][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.042234][ T5856] hsr_slave_0: entered promiscuous mode [ 58.048420][ T5856] hsr_slave_1: entered promiscuous mode [ 58.055683][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.062710][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.088852][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.106351][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.113394][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.139999][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.175445][ T5857] hsr_slave_0: entered promiscuous mode [ 58.181475][ T5857] hsr_slave_1: entered promiscuous mode [ 58.187750][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 58.193738][ T5857] Cannot create hsr debugfs directory [ 58.257082][ T5859] hsr_slave_0: entered promiscuous mode [ 58.263322][ T5859] hsr_slave_1: entered promiscuous mode [ 58.269521][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 58.275693][ T5859] Cannot create hsr debugfs directory [ 58.284457][ T5858] hsr_slave_0: entered promiscuous mode [ 58.290578][ T5858] hsr_slave_1: entered promiscuous mode [ 58.296612][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 58.302329][ T5858] Cannot create hsr debugfs directory [ 58.503126][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.516342][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.528579][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.537443][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.572464][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.581485][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.593378][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.605749][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.636646][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.657881][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.671417][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.686843][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.717976][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.732594][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.743051][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.752813][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.767362][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.791592][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.793996][ T5873] Bluetooth: hci1: command tx timeout [ 58.798443][ T51] Bluetooth: hci3: command tx timeout [ 58.803675][ T5873] Bluetooth: hci2: command tx timeout [ 58.809383][ T5865] Bluetooth: hci0: command tx timeout [ 58.834816][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.842081][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.851235][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.858365][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.896110][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.934721][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.955275][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.962383][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.980681][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.987818][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.999287][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.026307][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.047164][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.054287][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.075708][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.088616][ T3586] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.095753][ T3586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.138156][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.191817][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.198974][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.211371][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.218687][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.278750][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.301946][ T5859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.313376][ T5859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.395356][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.407703][ T5857] veth0_vlan: entered promiscuous mode [ 59.430539][ T5857] veth1_vlan: entered promiscuous mode [ 59.472605][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.495495][ T5857] veth0_macvtap: entered promiscuous mode [ 59.502168][ T5856] veth0_vlan: entered promiscuous mode [ 59.513005][ T5857] veth1_macvtap: entered promiscuous mode [ 59.523251][ T5856] veth1_vlan: entered promiscuous mode [ 59.552779][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.565368][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.594981][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.602518][ T5856] veth0_macvtap: entered promiscuous mode [ 59.609967][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.619048][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.635825][ T5856] veth1_macvtap: entered promiscuous mode [ 59.642880][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.651910][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.665753][ T5858] veth0_vlan: entered promiscuous mode [ 59.682855][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.696614][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.707378][ T5858] veth1_vlan: entered promiscuous mode [ 59.720601][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.729515][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.744943][ T4210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.766635][ T4210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.812084][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.820243][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.828808][ T5859] veth0_vlan: entered promiscuous mode [ 59.842005][ T5859] veth1_vlan: entered promiscuous mode [ 59.868114][ T5858] veth0_macvtap: entered promiscuous mode [ 59.880097][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.888946][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.897254][ T5858] veth1_macvtap: entered promiscuous mode [ 59.926376][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.936277][ T5859] veth0_macvtap: entered promiscuous mode [ 59.952386][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.973613][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.975273][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.990581][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.006970][ T5859] veth1_macvtap: entered promiscuous mode [ 60.037966][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.049532][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.059329][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.068627][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.079997][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.089927][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.108918][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.117481][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.124971][ T5944] Zero length message leads to an empty skb [ 60.160520][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.185914][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.198391][ T3586] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.235315][ T3586] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.256486][ T5950] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 60.264186][ T5950] VFS: Can't find a romfs filesystem on dev rnullb0. [ 60.264186][ T5950] [ 60.308178][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.341155][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.345904][ T5959] netlink: 'syz.1.6': attribute type 5 has an invalid length. [ 60.375177][ T5959] ======================================================= [ 60.375177][ T5959] WARNING: The mand mount option has been deprecated and [ 60.375177][ T5959] and is ignored by this kernel. Remove the mand [ 60.375177][ T5959] option from the mount to silence this warning. [ 60.375177][ T5959] ======================================================= [ 60.388914][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.422082][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.428218][ T5959] XFS (rnullb0): Invalid superblock magic number [ 60.462578][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.480391][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.556448][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.574770][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.793302][ T5980] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 60.838766][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.875458][ T5865] Bluetooth: hci0: command tx timeout [ 60.875477][ T5873] Bluetooth: hci3: command tx timeout [ 60.875500][ T5873] Bluetooth: hci1: command tx timeout [ 60.880937][ T51] Bluetooth: hci2: command tx timeout [ 61.303357][ T5993] /dev/rnullb0: Can't open blockdev [ 61.868268][ T6008] netlink: 'syz.0.16': attribute type 2 has an invalid length. [ 62.056610][ T6019] /dev/rnullb0: Can't open blockdev [ 62.536317][ T6027] wlan1 speed is unknown, defaulting to 1000 [ 62.549904][ T6027] wlan1 speed is unknown, defaulting to 1000 [ 62.558621][ T6027] wlan1 speed is unknown, defaulting to 1000 [ 62.664668][ T6027] infiniband syz0: set active [ 62.669488][ T5926] wlan1 speed is unknown, defaulting to 1000 [ 62.676766][ T6027] infiniband syz0: added wlan1 [ 62.682217][ T6027] syz0: rxe_create_cq: returned err = -12 [ 62.688858][ T6027] infiniband syz0: Couldn't create ib_mad CQ [ 62.696724][ T6027] infiniband syz0: Couldn't open port 1 [ 62.723372][ T6027] RDS/IB: syz0: added [ 62.731151][ T6027] smc: adding ib device syz0 with port count 1 [ 62.738917][ T6027] smc: ib device syz0 port 1 has pnetid [ 62.745208][ T5926] wlan1 speed is unknown, defaulting to 1000 [ 62.752030][ T6027] wlan1 speed is unknown, defaulting to 1000 [ 62.867169][ T6027] wlan1 speed is unknown, defaulting to 1000 [ 62.954244][ T5863] Bluetooth: hci2: command tx timeout [ 62.959817][ T5863] Bluetooth: hci0: command tx timeout [ 62.965519][ T5865] Bluetooth: hci3: command tx timeout [ 62.971533][ T51] Bluetooth: hci1: command tx timeout [ 62.998214][ T6027] wlan1 speed is unknown, defaulting to 1000 [ 63.103798][ T6027] wlan1 speed is unknown, defaulting to 1000 [ 64.309128][ T6042] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24'. [ 64.324934][ T6043] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24'. [ 64.671146][ T6050] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 64.689815][ T6050] /dev/rnullb0: Can't open blockdev [ 64.788883][ T6051] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 64.798099][ T6051] /dev/rnullb0: Can't open blockdev [ 64.914760][ T6054] /dev/rnullb0: Can't open blockdev [ 64.939248][ T6061] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.034470][ T5873] Bluetooth: hci1: command tx timeout [ 65.039916][ T5873] Bluetooth: hci3: command tx timeout [ 65.045613][ T51] Bluetooth: hci0: command tx timeout [ 65.051026][ T51] Bluetooth: hci2: command tx timeout [ 65.145682][ T6067] /dev/rnullb0: Can't open blockdev [ 65.472561][ T6076] random: crng reseeded on system resumption [ 65.504472][ T6078] process 'syz.2.37' launched './file1' with NULL argv: empty string added [ 66.543628][ T6048] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 66.707074][ T6114] /dev/rnullb0: Can't open blockdev [ 66.733181][ T6048] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 66.747051][ T6048] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.757394][ T6048] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 66.771938][ T6048] usb 4-1: config 0 interface 0 has no altsetting 0 [ 66.779212][ T6048] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 66.788616][ T6048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.798750][ T6048] usb 4-1: config 0 descriptor?? [ 66.891428][ T6131] netlink: 'syz.0.52': attribute type 1 has an invalid length. [ 66.942300][ T6136] /dev/rnullb0: Can't open blockdev [ 67.159337][ T6142] netlink: 'syz.2.56': attribute type 16 has an invalid length. [ 67.168423][ T6142] netlink: 'syz.2.56': attribute type 25 has an invalid length. [ 67.176545][ T6142] netlink: 64094 bytes leftover after parsing attributes in process `syz.2.56'. [ 67.221699][ T6048] hid-alps 0003:044E:120C.0001: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.3-1/input0 [ 67.340481][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.61'. [ 67.418722][ T6100] /dev/rnullb0: Can't open blockdev [ 67.426185][ T5926] usb 4-1: USB disconnect, device number 2 [ 67.633950][ T6048] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.801386][ T6048] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 67.810840][ T6048] usb 3-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 67.820433][ T6048] usb 3-1: Product: syz [ 67.824969][ T6048] usb 3-1: Manufacturer: syz [ 67.829649][ T6048] usb 3-1: SerialNumber: syz [ 67.839497][ T6048] usb 3-1: config 0 descriptor?? [ 67.848912][ T6048] ch341 3-1:0.0: ch341-uart converter detected [ 67.994424][ T6174] program syz.3.65 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.253482][ T6163] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 68.265731][ T6179] /dev/rnullb0: Can't open blockdev [ 68.276207][ T6180] /dev/rnullb0: Can't open blockdev [ 68.329449][ T6182] wlan1 speed is unknown, defaulting to 1000 [ 68.363641][ T30] audit: type=1800 audit(1756594772.061:2): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.69" name="bus" dev="overlay" ino=92 res=0 errno=0 [ 68.901089][ T6048] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 69.108609][ T6048] usb 3-1: USB disconnect, device number 2 [ 69.118919][ T6048] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 69.132212][ T6163] /dev/rnullb0: Can't open blockdev [ 69.155111][ T6048] ch341 3-1:0.0: device disconnected [ 69.976355][ T6217] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.042496][ T6221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.80'. [ 71.163701][ T5926] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.284622][ T43] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 71.320772][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 71.329655][ T5926] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 71.344673][ T5926] usb 4-1: config 1 interface 0 has no altsetting 0 [ 71.366234][ T5926] usb 4-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.40 [ 71.375353][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.383345][ T5926] usb 4-1: Product: syz [ 71.395199][ T5926] usb 4-1: Manufacturer: 䆾ƒ饈⎸ࡿ旃갤郼攆鮅请潃ߐ厌 [ 71.404886][ T5926] usb 4-1: SerialNumber: syz [ 71.438021][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.439748][ T43] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 71.444540][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.458857][ T43] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 71.569431][ T43] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 71.584196][ T43] usb 2-1: config 8 has no interface number 0 [ 71.590396][ T43] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 71.601580][ T43] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.617430][ T6226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.626269][ T6226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.649566][ T5926] usbhid 4-1:1.0: can't add hid device: -71 [ 71.655774][ T43] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 71.666098][ T5926] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 71.674030][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.685114][ T5926] usb 4-1: USB disconnect, device number 3 [ 71.691859][ T43] usb 2-1: Product: syz [ 71.697333][ T43] usb 2-1: Manufacturer: syz [ 71.701939][ T43] usb 2-1: SerialNumber: syz [ 71.932760][ T43] usb 2-1: USB disconnect, device number 2 [ 71.940929][ T6237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 72.028657][ T6242] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.164059][ T6251] /dev/rnullb0: Can't open blockdev [ 72.190443][ T6255] /dev/rnullb0: Can't open blockdev [ 72.221864][ T6257] tmpfs: Bad value for 'mpol' [ 72.228308][ T6257] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 72.239355][ T6257] /dev/rnullb0: Can't open blockdev [ 72.341788][ T6263] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 72.350739][ T6264] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 72.496910][ T6268] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 72.843714][ T5898] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 73.003588][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 73.018348][ T5898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 73.034466][ T5898] usb 3-1: config 8 has an invalid interface number: 59 but max is 0 [ 73.049929][ T5898] usb 3-1: config 8 has no interface number 0 [ 73.065053][ T5898] usb 3-1: config 8 interface 59 has no altsetting 0 [ 73.074120][ T5898] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 73.103483][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.113237][ T5898] usb 3-1: Product: syz [ 73.117938][ T5898] usb 3-1: Manufacturer: syz [ 73.122612][ T5898] usb 3-1: SerialNumber: syz [ 73.300936][ T6282] netlink: 'syz.3.102': attribute type 3 has an invalid length. [ 73.324747][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 73.549624][ T5898] usb 3-1: USB disconnect, device number 3 [ 74.553732][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.693649][ T43] usb 1-1: device descriptor read/64, error -71 [ 74.936084][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.083698][ T43] usb 1-1: device descriptor read/64, error -71 [ 75.196786][ T43] usb usb1-port1: attempt power cycle [ 75.554015][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 75.585236][ T43] usb 1-1: device descriptor read/8, error -71 [ 75.823602][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 75.846428][ T43] usb 1-1: device descriptor read/8, error -71 [ 75.959821][ T43] usb usb1-port1: unable to enumerate USB device [ 76.390528][ T6318] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN PTI [ 76.402448][ T6318] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 76.402610][ T6317] /dev/rnullb0: Can't open blockdev [ 76.410857][ T6318] CPU: 0 UID: 0 PID: 6318 Comm: syz.2.114 Not tainted syzkaller #0 PREEMPT(full) [ 76.410876][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.410887][ T6318] RIP: 0010:h5_recv+0x146/0x910 [ 76.440121][ T6318] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 ec 2b ae f9 4d 8b 65 00 31 ff 4c 89 [ 76.459724][ T6318] RSP: 0018:ffffc9000530fc20 EFLAGS: 00010202 [ 76.465814][ T6318] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 76.473769][ T6318] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 76.481723][ T6318] RBP: ffffc9000530fd40 R08: ffff88805bf6241f R09: 1ffff1100b7ec483 [ 76.489676][ T6318] R10: dffffc0000000000 R11: ffffffff88764b60 R12: 0000000000000001 [ 76.497631][ T6318] R13: 00000000000002f8 R14: ffff88805bf62410 R15: ffffc9000530fde0 [ 76.505592][ T6318] FS: 00007f09df8376c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 76.514504][ T6318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.521068][ T6318] CR2: 00007f09df815f98 CR3: 0000000076d24000 CR4: 00000000003526f0 [ 76.529029][ T6318] Call Trace: [ 76.532296][ T6318] [ 76.535214][ T6318] ? __pfx_h5_recv+0x10/0x10 [ 76.539794][ T6318] ? __pfx___mutex_lock+0x10/0x10 [ 76.544812][ T6318] ? tty_audit_push+0x7c/0x250 [ 76.549576][ T6318] ? preempt_count_add+0x91/0x1a0 [ 76.554601][ T6318] hci_uart_tty_receive+0x194/0x220 [ 76.559795][ T6318] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 76.565508][ T6318] tiocsti+0x23c/0x2c0 [ 76.569585][ T6318] ? __pfx_tiocsti+0x10/0x10 [ 76.574159][ T6318] ? __fget_files+0x3a0/0x420 [ 76.578818][ T6318] ? __fget_files+0x2a/0x420 [ 76.583396][ T6318] tty_ioctl+0x626/0xde0 [ 76.587621][ T6318] ? __pfx_tty_ioctl+0x10/0x10 [ 76.592452][ T6318] __se_sys_ioctl+0xf9/0x170 [ 76.597035][ T6318] do_syscall_64+0xfa/0xfa0 [ 76.601528][ T6318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.607579][ T6318] ? clear_bhb_loop+0x60/0xb0 [ 76.612242][ T6318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.618265][ T6318] RIP: 0033:0x7f09de98ebe9 [ 76.622687][ T6318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.642370][ T6318] RSP: 002b:00007f09df837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.650778][ T6318] RAX: ffffffffffffffda RBX: 00007f09debc6090 RCX: 00007f09de98ebe9 [ 76.658739][ T6318] RDX: 00002000000003c0 RSI: 0000000000005412 RDI: 0000000000000007 [ 76.666695][ T6318] RBP: 00007f09dea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 76.674652][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.682604][ T6318] R13: 00007f09debc6128 R14: 00007f09debc6090 R15: 00007fff5fb040e8 [ 76.690574][ T6318] [ 76.693581][ T6318] Modules linked in: [ 76.698286][ T6318] ---[ end trace 0000000000000000 ]--- [ 76.713172][ T121] cfg80211: failed to load regulatory.db [ 76.719138][ T6318] RIP: 0010:h5_recv+0x146/0x910 [ 76.724182][ T6318] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 ec 2b ae f9 4d 8b 65 00 31 ff 4c 89 [ 76.743913][ T6318] RSP: 0018:ffffc9000530fc20 EFLAGS: 00010202 [ 76.750535][ T6318] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 76.769719][ T6321] binder: 6320:6321 ioctl c0306201 2000000003c0 returned -14 [ 76.798252][ T6318] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 76.809061][ T6318] RBP: ffffc9000530fd40 R08: ffff88805bf6241f R09: 1ffff1100b7ec483 [ 76.819529][ T6318] R10: dffffc0000000000 R11: ffffffff88764b60 R12: 0000000000000001 [ 76.828075][ T6318] R13: 00000000000002f8 R14: ffff88805bf62410 R15: ffffc9000530fde0 [ 76.838230][ T6318] FS: 00007f09df8376c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 76.847673][ T6318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.856148][ T6318] CR2: 000000110c393eba CR3: 0000000076d24000 CR4: 00000000003526f0 [ 76.870244][ T6318] Kernel panic - not syncing: Fatal exception [ 76.876568][ T6318] Kernel Offset: disabled [ 76.880901][ T6318] Rebooting in 86400 seconds..