last executing test programs: 10m4.196324138s ago: executing program 32 (id=1117): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x40010, r2, 0x5708e000) 7m47.890601801s ago: executing program 2 (id=1838): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000680)=""/190, 0xbe}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f00000001c0)=""/127, 0x7f}, {&(0x7f00000002c0)=""/93, 0x5d}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000280)=""/64, 0x40}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f0000000500)=""/150, 0x96}, {&(0x7f0000003580)=""/4082, 0xff2}, {&(0x7f00000009c0)=""/244, 0xf4}], 0xc}, 0x2}], 0x3, 0x2100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './cgroup'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x8000, 0x50) getdents64(r2, &(0x7f0000000740)=""/243, 0xf3) getdents(r2, &(0x7f0000000240)=""/155, 0x9b) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010309023b00010100000006000000120206"], 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000040)={&(0x7f0000000180), 0xc, &(0x7f0000000900)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x24008014) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m44.843769921s ago: executing program 2 (id=1860): bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b5122113", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m44.722498472s ago: executing program 2 (id=1861): r0 = socket$qrtr(0x2a, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x2}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000000c0)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000005c0), &(0x7f0000000600)={'U-', 0x1}, 0x16, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xff03, 0x0) read(r0, &(0x7f00000001c0)=""/173, 0xad) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000280)="9b48c4f600249bfff6aa3a3b9a3d5c53d9d254ecc9c3aa124675a4c04e70e3abc98580f74bd8689864479e19535e1cdcb83913efc2523685035790359e0b198c82", 0x41}, {&(0x7f0000000300)="ebffd4dee9d0c8309e22bf36390323af3edb59d467f2523d30a84e65fec5764463a157cc5da8e76745119c5fd48f9b95a6fefece1b5f8a7018427660671ab6ebf697252c8f001a71a518b54053a5069c6512798e0b935889936fd43422f7eeca", 0x60}, {&(0x7f0000000380)="f93b57764dba844cf48c67f127bb871a1ecd8d5521c9d202546a8273429b2a7f36bceb746530914f364d456a771bb53255532caddcb3330baa22e2e25f23038e3f9dae3247e087c4e55d3cfb2ff0b5eaf4e5ab26fe750456be80d2e53a92b0feb86171fb338fac13593fa552ea63b0311a7c05951836d30194f06117bb27f28aa8c22ad30e7fe1a8dec937661aa9f3d4f85d8fc31290947bc0b9896ba1b25688d5a373d668ca1ef89e1111027e4cd8591a6b9df69aeee1ff3af1b26e2608b7c612f167c808b70e9837e64352681c465865ce625715dde2760d2439dcd9d0eb488ec82186ba407acdb951b34f6b5b", 0xee}, {&(0x7f0000000480)="5465bd0f0ff90744ed0c12f93ae714a2cf558521aad6802d00aed015141a097fce265e0bb3e09600fe38c30affc54121c340ef8d96f251e085ad8a14ed30f35ed5f2d2d47986b70db4d63aa03b83eb34a9ac785fa572d94c6bf7beca95b9f9d3d6fd2cf3ea1f0cb4465f021ca94bbac71f130c29c461763447d74f993a6194a9f55090fd1831bb1a887c65443a", 0x8d}, {&(0x7f0000000100)="cb", 0x1}], 0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='devpts\x00', 0x200000, 0x0) 7m44.505652508s ago: executing program 2 (id=1864): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000200)='./file0/file0\x00', 0xb) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 7m44.238489912s ago: executing program 2 (id=1868): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r1, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) 7m43.922869285s ago: executing program 2 (id=1871): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0x200000, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200000000000000, 0x4000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xba, 0xfffffffffffffdfc, 0x4, 0x40000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8001, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5]}) 7m43.718786663s ago: executing program 33 (id=1871): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0x200000, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200000000000000, 0x4000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xba, 0xfffffffffffffdfc, 0x4, 0x40000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8001, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5]}) 7m35.403073095s ago: executing program 4 (id=1911): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x6) recvmmsg(r4, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x1, 0x40000002, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r3, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x8031, 0xffffffffffffffff, 0x4000) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x2, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x40) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4001, @multicast1}}}, 0x118) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000001440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001400)={&(0x7f0000000240)={0xd0, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa79}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe00}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x400, 0x1f}}}}}, 0x28}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x1, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r10, &(0x7f0000000400)="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", 0x1f000) 7m34.907891039s ago: executing program 4 (id=1916): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 7m34.711912832s ago: executing program 4 (id=1917): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x0, 0x1}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 7m34.648640066s ago: executing program 4 (id=1919): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 7m34.483881315s ago: executing program 4 (id=1921): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5", 0x39, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xc82) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0x8008ae9d, &(0x7f0000000040)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m33.859877666s ago: executing program 4 (id=1922): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x141002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000180)={r3, 0x6, &(0x7f00000000c0)=[0xfff, 0x9, 0x1, 0x7, 0x0, 0x0], &(0x7f0000000100)=[0x6, 0x5, 0x7fff, 0xfffb, 0x7, 0xb8, 0x2a, 0xaf97], &(0x7f0000000140)=[0x401, 0x5, 0x3, 0xbac, 0xd]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, 0x0, r4, 0x80, 0x7ffffffd, 0x8, 0xb148, 0x2edfc, 0x0, 0x7, 0xe, 0x2001000}) creat(&(0x7f0000001380)='./file0\x00', 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 7m33.587351629s ago: executing program 34 (id=1922): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x141002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000180)={r3, 0x6, &(0x7f00000000c0)=[0xfff, 0x9, 0x1, 0x7, 0x0, 0x0], &(0x7f0000000100)=[0x6, 0x5, 0x7fff, 0xfffb, 0x7, 0xb8, 0x2a, 0xaf97], &(0x7f0000000140)=[0x401, 0x5, 0x3, 0xbac, 0xd]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, 0x0, r4, 0x80, 0x7ffffffd, 0x8, 0xb148, 0x2edfc, 0x0, 0x7, 0xe, 0x2001000}) creat(&(0x7f0000001380)='./file0\x00', 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 7m10.778894759s ago: executing program 5 (id=2085): bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b5122113", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9"], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m10.66494974s ago: executing program 5 (id=2086): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$media(&(0x7f0000000000), 0x8000, 0x143800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000840)={0x0, 0x5, 0x0, &(0x7f0000000080)=[{}, {}, {}, {0x80000000}, {0x80000000}], 0x9, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}], 0x3, 0x0, &(0x7f00000007c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000980)={r3, &(0x7f00000008c0), &(0x7f0000000900)=[{{0x80000000, 0x0}}]}) r10 = fcntl$dupfd(r0, 0x0, r2) setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f00000009c0)=@gcm_256={{0x304}, "fefd7895fa5d7bf5", "a65053ce72d0e76a9ad98d54c1a4fa1d4d5530f7963d1a855b3dcdfd7aabc96d", "63da09f6", "27f84ae4d3a00857"}, 0x38) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc018937e, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r10, {0x1}}, './file0\x00'}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000b00)={r4, &(0x7f0000000a40), &(0x7f0000000a80)}) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@initdev}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000000c40)=0xe8) ioctl$MEDIA_IOC_G_TOPOLOGY(r11, 0xc0487c04, &(0x7f0000000fc0)={0x0, 0x3, 0x0, &(0x7f0000000c80)=[{}, {0x80000000}, {}], 0x1, 0x0, &(0x7f0000000dc0)=[{}], 0x1, 0x0, &(0x7f0000000e40)=[{0x0, 0x80000000}], 0x7, 0x0, &(0x7f0000000e80)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r11, 0xc0347c03, &(0x7f0000001040)={{r4, r5, 0x2, [0x4, 0x6]}, {r13, r8, 0x0, [0x4, 0x10001]}, 0x0, [0x10, 0x9]}) ioctl$sock_inet_sctp_SIOCINQ(r11, 0x541b, &(0x7f0000001080)) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000010c0), &(0x7f0000001100)='./file0\x00', 0x8, 0x3) timer_create(0x6, &(0x7f0000002180)={0x0, 0x9, 0x1, @thr={&(0x7f0000001140)="6f530fc8af9bbcd78c2f634838190ae732d303b3b3145d9356d63389ac19d87ad3e1f3589b698801e20f8dd9c36c9b512b3526a22dde3a52a46738a2e6a79cc9510f5099ffbb54e17d717fd49ccf8a8f72b56e478ff25a27b63002129e0d37e04cb6240b450a2baa76696005ffe51cc261cfd3b3373ab37e760d6f7b52d7177be508a03752aed1a5f2849607ee0be559ffb5d0a5bef5f852f99792981c1c5d0b6ee4025bdb50ab8b884b777fe989cdbbc8da009403c4563fe1f651e75c8aec94ca5c15b6d80e027d119451b2c3469119ade7c2361e140fd54dfb46ec09d6085e3e3e3c108b0df0dc73a2730d32fb0527ab650d2c65174819d90aa77eeab170128af910b3cfab89885664b73fcae7a25d236ab08bbeeb30387edc8231ba090074810b605774570f7ae1ac062a20e9335dd510aff1d34632f5099f87f0b3cc63031bd55c1fec11b1da5afbd777283821eeeaf6e473bcc0ae38f5a1f786c9e459af113f85039fb8bf97a240c32138beebe94d68c2ed8e3efedb8efc88f772b6181d37e77d04c7eb83780a49f671242ba27870567001e93b84a19cec0ebb83c113bb0eb52ac0e8d4b606bef1d7d67ffc08dcb3a4ac6f31632b10c231ba02a1428b684e9b2f6036bf1b6ffcc074b4ccd750952c0c8c19308d3569b69bd4e8e695cb6ebe71dc74cd6f2b9367ae670ed5248adf076df4f8eadd35bbae6ed4c8dd1db60da2b874462a73578b6a3ca961389f67596c87aaa3c1bf4f67acb91813a73591d9175fb735f8a380f91ef1c766736739bf4f385e93feff5978caa6431ec401ae5bfa0be26d726ee05a42abb8e185178b818f82e05041b0bcd579958fc01c0dc79141f9bf930f79983a6858e92f9fd4cb8b8214f23918fd4c166dd5ca6f3b1039bfcb41c05d561740e1ea1bd54c640e0743525e8aaae2023d27e043ecdc19c1f4f487c0ef6fbc3e1c01131bc0ab8b0d5186707dfcb9b342fb6c37c10475e3b6dd5493d7b0f2795d0ea2792236b9e7be05ed38214e669be93e927c6c3cc78ce452369dcd43dec7013228ee4da3c2f3ccefcb248f169a69c5c2252bf946832a3230f9c30ac8cf499569be0725edbe52abd97ee7a34c770a81b33982bc2406ec243332b5823e83b1c33d61fcfe6bdc59394f3fc0d995d54a0778cef465ddd13c7bc677fe8b48eaa1eedccc1a3eb3751aca2859c008384885bb87b965ea2aa292f62a157ba035affbca38123a31d559a7bf6beafbf2847d7f3fb11717ea8aa438a0494d97e36c669127772ec37300ea596f6e0ed07b3293a4880c4a80720b8918c7122219af7e76bc94dd9822b7ba14153aafdeea6c34ac306a7712a30aa28a8fe4bd62c5f6809c7272d99dacfae33c34cfa02bbd55c43e3178389c9e0219a96f00db3cd4b52516521e6249db73de60f22e5dc38c0ece2d1a4ba3ce15fd0826840787fd804e4fff6e20cc811702d0c680330ee39d707afa3374a52bf0c1278e00dd14271a1704833726f0b0faf671f1de3cb9603e429c6e10e72df4fdd0e6517225a80eb09d4d6345769bdf7c5c73b3f6c75bcee4f38432c8d7aa8a3bef069193d0d8cb11344e63bbdc47f2f60f4c6241f94f979c2643f76f4b32e4cb53447c8f39988349b2287d210038d008df50fd0b72609886f6766a66ea9f41d40692c5ec07ca691ab3e8a50185e34ef5395391a1a349a1a5f9ffbf277869562db278d722dccbf0d8aa004325c8a5df6b8c3a425e5b703f77b72f9899bf88477377691e4d6d8e6c6c7db31b56715a23b8734e7db877442e9b5e6008199045428cc74ff721e623e5847c7d8b6b374db6ead5a99434d58df77b7c080242698c03421b78b37d5e87a2bb4e63f45741171f4d267b0f4d06cb4c49697e9f6c75b86d1d36bdfdd53073572d81206370430f1c41a093da1e61f0cd9dc737b729079bc7d9c3e09ee526c01fd8adc3cdc83195b2b028ad593d6c4fc06e5dac59e46f16c9af1a163887752c041adba9f4bbacac2ee337309db6de79595dde88728599ce2c35e6b08d79d2e95f24cee0185942b7ba80887cad8f15618b7152fb6d60893f49391fdbe687cbb9c441dba9fb895f8ba487020b20968ec7c7e35c287f82d7dfbccaf53173e2a7a90722e41ec0bf10ed4cbb7361c38dbc7b5fe79f1158a462bbdb96c3fd6745ca9a5ddd19d51d9cf62868fa47db6532d0c40e52b828adf5e349f0c18c5f3878f13853eefb187b751c0739fd2558ac831d8945f7808d946d90deb52267d0eb1028429f026f7fd0bdcfbe93e1fb96af2c33f3ff65fcaf3baf131224194ac617e1a55f701cedc6a6d7f588b2caa98960d1f40a5e9052a8f6426e5d8574d8b7ae37519469d773e1e47fd52010bf200bf47540d66a47b649badbe8a1a9fec989a2c25fec29f6ab42cde820784b88a999a654d5a0ce52a801a8ef04cdf2a987190f7e68e072c0c0b6b74aa77c355885821de0d66355ea84d21846bc4457f7cc7f9a592e11107a0bda4980bba7e79b1bf33de5433f2ffd994e85ab5f52c2524e384ecb57259612cf4413dd87b1b114ea559e0b8e6b3f56dcd8fc96064d561a721efd41fdc19cb852fc4d769ac2b47dfccfbd94e930b00a1d93b23afe637ab06744a61a1189f6c3ab9ce306c7b4962970e589625456defe6377996103124b5a31f3b7964f19777be3871a72fccafdfac2defaed6f9ddaed25f0091064f8cace435d07bf5996c6acf3460038598dabacefe804b4029dddd255124d5a37433d467d1de124e89803ec6819bafeeb04e24a92a3a704b32c8af12e626bd484e8520f69487fcd15f4787c1576cada85b67e1b56e0567ccd284fd06c199b2660712b4f6ebd09920cdb7d3094798dc5f3ea278e286a3679d2886eef027e5fe24ee8ddcd4ca96d0fcfa264feddb1a8c76319d24acffbc8632ce296e90e3da49d1cd0ead0f0d0dd6ac453ac1affd8625b21aad4592592b48b08c5a4f9e0d17e2555568daaae6fb1653df0539429de53c2284a1eee122ad16296717095d4034045c1a34b5a26d82b53fcb134f7d380148f8a6b0c92369625885a5d6b30a4917dfebced8c895afb57eb26c28bd606a06525179df5f027efe024499e8e463987b490170fb0127ddbf82df7a19f4d5226d01d19cb2438dd2d4a1518e8fd009ba3c9ce10101d2c10a9854c64234877b8d43a605c37b3fb98ca1a74d77384cb240cb838370a2b56d20417a7103700c3b15199704671314c5b62334a687623347a4f5476669de9f017ca2d9566fc7f1931cf66805b9a718667f2fe42af9df50c0086a1ac9556c25964df7930449ea2569fc5874c19522970530db1b4cd1a3d31ec181f1ea078a2a1d8c0ece39d1940b0d329513acd3df2a89eec55f5a46dedece3ae8ab214ea9d6c2660f529872c8440d9e8e1c7f772b835afc4e4b9bf3c0711d0cf161adce0857eb134d82349f715bd2cf20717c0716a8858188f401cd6cda869b8db6488924e5c34cd0af2ae3f623ae31c8d7b45ad3820f8063d4c84d59f02c5ec88d32f6425562c95c3992e9063e088b616c6990e0be00b0b97f4ea3f116d67c1e59e582705f658a089730b9d1f7812244512c6e2b71b3fd7b81a45ee0a56d5ffabd1b484b8ae693c871be26c638b4e354d407a49e77c94bfcfe0c1f0eeae7c9ca4ea68ada9dacee6bf133728190b82ca6026631371193abb5c4659946f0f703aece8bd45a1972d5da0bd8f4b4bd2aa7add1209c706cb0b0e3abf6c0b09422e330ca022aa0b3e520bfb2497096bcb9e8b76edcbe7356d67efc4210c1e15927d7e86fe98e243a8068c2fa80c6c5607e9332b38c5b13aab1065c0e1e8eef1f68fab175d6e4e1c19f80a7dcd306f6bf687bc7b03afa68160870530a0631fd4363e23624f1f90085ff923593afdb8cd7383d97b123e3bf75cec511d1ef79ac1077105b4d3b3259865db63f6bdb67515170ecde6fd3c4e172de639c5d21299e45800c6b55c2176f534f63704afbce43b5d7da61cc49cd9bd95dbb451a003e06dfe2e17045e509876f7251a0c33040a68a683b6fc01211ba842a4e85a9786bcf33d173b0298318e6a441d52626c7e595720610aab335aee91fdfa61a70834b27fc521fff044aff3b81e9638a3a0bbeb253a1294b3673b93317231504eabc18d156b523f380b448e41994de11f08c0af74b55804ca9f50c15297b6b740fcc34a9d431f0852ccb06852126cfd495dfb299ec520e1e5e49a60f7ba064dff223b1e5c4ea4116f90ee4d13a8c17d2fb7cce75fad1f1feb59c2d7c5b724dddd197705c99d4399f458f3c3baa890c57466160c57edf9791d75441eaef17d6ba31394831e7ecfe9316e908aab4cfaf02b731174d4c7758d42fa095a97ed3b348389855ce7004905794c28c22fe92b9f4d803167c0f5b545dd9d6c5c788202bd0ef6731578cf6868555528271201e22d5c6534a63405625d4ec97ae8a9a91bd66ca85b89af2d1f0cdb60b7129dfb39827c8a75973ecdfb6f3f6a8e966f4cde65186591aa99a1d7b77f1c15e56d0059f16386d3da989836b2659c1fb6a77b54a928789d2fbee5f044ed88e5f2597ff45674d0470e1d47befd1a5c93b7335e21a6bcb569046bccf82c82078fa69f49c60171972ba7eafada1bff3a7723ba7b97859f3bd5e27add2ca51d833b0680cc445386ea85cd0db3d16fd2ba092d6fcb0d50a65d540703e79811d68bc36138a6fbfb39d482ff7aa53b4aede01511ea32522a908e93e6ab12ebd7dd618a12ba9111956f814152cf6adac417b887201e1c3a48bd441af26f32fa691891c204c154e5f97bc56b882c869c4f6591a34054f83aa7006fff19ff34cb17b9703f701da0e02086288c96e62cd33cd0773974a878af8a22806ae2966de5ffcd9003048e9567ea991c6ff9511d58d4b8a138be2712e9b388ea42c718b0d4384a962a89fac4cdb715a6d2f4501fef9c78477676ef54e19c5fa883c7d33f47ae42ca4f4cd5ca96c54678a18e3f7e61ac94bd9bc119d09914ad332441133c3a132644c8b8bc075cb68e5fea4a98d2e2f6456e458d9d3783854f493522112dbb233b82225c40dbc857aea286f2cd23c87ef670ecba1b3ef3fb1d74f3df4e1fb7aadadb2e28b9acb081e25d76f393cb31d630a03950cade6eeeaee6870bf01204ce1d0b7c42c8aee1afafd45172df68ab17df5db071f53fc0880d0f498a07fc70cebdf51b4f8c4fe8651b12e4d3e074c20d12c3cad75e58d464a90b8474972f324d88f939685ed318fd0b54e82bd74bb2c39c3aec7c87915275e00d31e8c8b985ad2ae0c94abf0a404519bd9077cc7a0d2202c57fd433169b3a5f712f8221702ccbfc305a137228d75d27d440c195cfae8619d060bf99b32faf2bd8223b301635e0c8a9a209c172c1fd9b810dbdd949ef9faf46fa703411b1842f2b8fa9308917cf7f2a609f0d928df7569757526acf2ad67fcf3956ba6281840c17a6f2bfc6504b8686178c04e1406493491cddd9293ab7e552ffe8a350314fbcb740f1d0c0714f5a6ca6ba1c0e31f5d833b395bec182d6882639eb0dd6ff880d04dc5559787a82a3a3bee817f13bf95d900fc33043475dafd3070682de7a78f4aef890e5cb4ba06f9cd585686fed43e6eb5e54de71f4490510195785981cd6412546575ed2b5cb545f3eaed06c8ace3b4c955e6e6508eb3ecd201d42fab140b518d690ab9892c69242359c7514362263ec0816aff4acfd4236a5028c21b3fade92b6d62e7ace7b171cd5ef55009ec9cc9ad1735888ebee820068ca1bab264ae8dd48266eae823a36dad0f53502c8c72a0220e0c8", &(0x7f0000002140)="9017f5a150f4ee2feca0da5f2b91b17e6da1cf1b0f215127c8fcaea6e5712072e508214730"}}, &(0x7f00000021c0)=0x0) timer_settime(r14, 0x1, &(0x7f0000002200)={{}, {0x0, 0x3938700}}, &(0x7f0000002240)) r15 = syz_open_dev$usbmon(&(0x7f0000002280), 0xffff, 0x20280) preadv(r15, &(0x7f0000002540)=[{&(0x7f00000022c0)=""/88, 0x58}, {&(0x7f0000002340)=""/121, 0x79}, {&(0x7f00000023c0)=""/45, 0x2d}, {&(0x7f0000002400)=""/148, 0x94}, {&(0x7f00000024c0)=""/120, 0x78}], 0x5, 0x6, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000002600)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000025c0)=@loop={'/dev/loop', 0x0}, r16, &(0x7f00000026c0)) r18 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000002700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r18, &(0x7f00000027c0)={0x14, &(0x7f0000002740)={0x20, 0x9f4fe534627b18b9, 0x2e, {0x2e, 0x22, "5ade33c6e15a1dad6d2a60cd529aecb7046ea6a48a5d1993f54979e02de8609f45e14135f67c9e03d6a41ebe"}}, &(0x7f0000002780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f0000002a00)={0x34, &(0x7f0000002800)={0x0, 0x30, 0xbe, "9a2cdd3515ce4b4a27d45bf13f07795415a17bd08400b5af030bd03c28385a844150f5eb21c071091378cb4c56c0e09bf4fb4038973d018fb4c3500052a01ee9d7fca7003a8fab2a09a21d9b916fa57564790ab4eba7f61e3fcda18437ec3f4f3261dc8236e11e3f07d77e97ea199760c195ed51648c92023ddb48593ac5d186b670c96d7cf60a1c62bc666f80a28b2e49861d9fd37438c69f11e4811b14165d714ccc67fce9e7630aae95cd36cfdd03b510e9b9c8388e6d60b806ef55cf"}, &(0x7f0000002900)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000002940)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000002980)={0xc0, 0xa1, 0x4, 0x7}, 0x0, &(0x7f00000029c0)={0xc0, 0xa2, 0x2f, "619f8be8a3557b4b2ad283500e16415fe28203e28d5fcb8c3c3e113a2a474610d3249cf27b60e4941d1c60d6ac92ca"}}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000002a40)={{r12, r9, 0x2, [0x1, 0x6]}, {r7, r6, 0x2, [0x280, 0xfffffffa]}, 0x2, [0xe, 0xb9d]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r1, {r16, r17}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000002ac0)={0x0, @in={{0x2, 0x4e20, @private=0xa010100}}}, &(0x7f0000002b80)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r19, 0x84, 0xd, &(0x7f0000002bc0)=@assoc_id=r20, 0x4) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000002c00)) ioctl$VHOST_VDPA_GET_VRING_NUM(r10, 0x8002af76, &(0x7f0000002c40)) mount$9p_fd(0x0, &(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0), 0x40002, &(0x7f0000002d00)={'trans=fd,', {'rfdno', 0x3d, r19}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@cache_readahead}, {@version_u}, {@noextend}, {@cachetag={'cachetag', 0x3d, '},'}}], [{@euid_eq={'euid', 0x3d, r16}}]}}) fchmodat(r11, &(0x7f0000002dc0)='./file0\x00', 0x40) 7m7.579145574s ago: executing program 5 (id=2104): r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="85", 0x1, 0xffffffffffffffff) keyctl$read(0x3, r0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89ff, &(0x7f00000000c0)={'bridge0\x00', 0x0}) keyctl$read(0xb, r0, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r4, 0x400, 0x0) fcntl$getflags(r3, 0x401) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000fdf2000040"]) pwritev(r2, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x15, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000013d2da57ca88c9a388ad00", @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf25090000000a000900aaaaaaaaaa2d00000500300000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) 7m7.302973329s ago: executing program 5 (id=2105): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) (async) r1 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0/../file0\x00', 0x40) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) rmdir(&(0x7f0000000380)='./file0/../file0\x00') syz_pidfd_open(r1, 0x0) (async) chdir(&(0x7f0000000180)='./file0/../file0\x00') (async) prctl$PR_MCE_KILL(0x48, 0x0, 0x0) (async) mmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2000000, 0x22052, r0, 0x2000) syz_clone(0x2100000, &(0x7f0000000040)="d03c8ae698d57c5045320971a2d706ace472cad132a60ff1938c4b4a32c31b23d4c6f9e26a3116238253d621c1166d3a046cf3dde35f41d8669fc20575641b28fcb0c080dd8926902086e6ef6a23036a39f1b03a8221f31e650b58c019488db40b361af5a1dfc00801165b27cce67b083d10dd97c442858a9627ba7ad55463b38b75270f91e9e40a74d0494e28657ebe1deedbbe70d987", 0x97, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000003c0)="3d75503b31032866f4bc350eef262f249e94908b1e1833d76f5de9e38a84a1213cd6fa096cb490cf7f8b423755b126358dc52e3863e2084e5341731ff61f67a28df3528184a36b9041f0959a27896b1dfbb5d5f7aaa4b471c04894477e6057a411c0218f755f3981a7a1c1eb42e349318456617b1b54da3fd856f6316ded4c00f0479edf8c17c6c680dda9b3cb89a895f71c607d9fc28c61293ae1b55df545a7d32ae512af1b5ba9f2fc65ff18e88590752e4ef50dc6ad37bc27fb9ebe81f838211a3d3f8c06dbd9db9ef90f876a00e06298ded074b82f05dda1fe") prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 7m7.139869173s ago: executing program 5 (id=2106): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x52) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, 0x0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x8000000, 0x8, 0xff}) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r4, 0x2c3c000) 7m6.915584933s ago: executing program 5 (id=2107): bind$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b5122113", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(r1, &(0x7f0000000ec0)=ANY=[@ANYRES32=r1], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e1209002100000004", 0x2f}], 0x1}, 0x24004880) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = getuid() sendmsg$nl_generic(r0, &(0x7f00000008c0)={&(0x7f0000000840), 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="d0030000260000082cbd7000ffdbdf25160000000b00b5003a23235d3a3a0000bc0004808a8edde763357cf7ff176ac3841dcf43d1f51b2b4482dd58dbf6fbad6ca9a8bdef83abebab2600a999a517743c1e16fc6c20a308449a6bde45bcaff5f8c0e7c0e7744f89323440f0dacc66642532f34fc4b60a80461a04eee27b0670698b95dce30900bb976dcae663510fcf53babf7436919b11db200ea24b6758a9790e354c94bfe42311ea59730c9015f9b2e5b13656be242ea92e7a094b9b9f94f57a3ed3b4098f1611afe7baf8cddfc9b4f33b01ee82cd29e40b76d5235b7b72caf160855946c4cf", @ANYRES32=r4, @ANYBLOB='\b\x00U\x00', @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x3d0}, 0x1, 0x0, 0x0, 0x20048850}, 0x20040001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0) accept4(r2, &(0x7f0000000780)=@can, &(0x7f0000000800)=0x80, 0x800) shutdown(0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000ffdbdf2503000000060002009b4300000009000400000000"], 0x24}}, 0x4008050) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m6.667602767s ago: executing program 35 (id=2107): bind$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b5122113", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(r1, &(0x7f0000000ec0)=ANY=[@ANYRES32=r1], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e1209002100000004", 0x2f}], 0x1}, 0x24004880) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = getuid() sendmsg$nl_generic(r0, &(0x7f00000008c0)={&(0x7f0000000840), 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="d0030000260000082cbd7000ffdbdf25160000000b00b5003a23235d3a3a0000bc0004808a8edde763357cf7ff176ac3841dcf43d1f51b2b4482dd58dbf6fbad6ca9a8bdef83abebab2600a999a517743c1e16fc6c20a308449a6bde45bcaff5f8c0e7c0e7744f89323440f0dacc66642532f34fc4b60a80461a04eee27b0670698b95dce30900bb976dcae663510fcf53babf7436919b11db200ea24b6758a9790e354c94bfe42311ea59730c9015f9b2e5b13656be242ea92e7a094b9b9f94f57a3ed3b4098f1611afe7baf8cddfc9b4f33b01ee82cd29e40b76d5235b7b72caf160855946c4cf", @ANYRES32=r4, @ANYBLOB='\b\x00U\x00', @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x3d0}, 0x1, 0x0, 0x0, 0x20048850}, 0x20040001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0) accept4(r2, &(0x7f0000000780)=@can, &(0x7f0000000800)=0x80, 0x800) shutdown(0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000ffdbdf2503000000060002009b4300000009000400000000"], 0x24}}, 0x4008050) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m3.287198802s ago: executing program 0 (id=3468): mkdir(&(0x7f0000000540)='./file0\x00', 0x109) (async) mount(&(0x7f0000001400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x100020, 0x0) 2m3.249700181s ago: executing program 0 (id=3469): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file0\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000540)='./file0\x00', 0x108) 2m3.155832622s ago: executing program 0 (id=3470): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x205, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x40a0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000160000044d564b"]) 2m2.516328548s ago: executing program 0 (id=3473): bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b5122113", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe", 0x4e}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9"], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m2.399890049s ago: executing program 0 (id=3474): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x220082, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (async) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0xd5) r4 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x57, 0x0, 0x34, 0x0, 0x0, 0x64, 0x35, 0x0, 0x39, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x18}, 0x48, r1) keyctl$KEYCTL_MOVE(0x1e, r4, r1, r2, 0x0) (async) keyctl$KEYCTL_MOVE(0x1e, r4, r1, r2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) (async) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000200)=@overlay={0x5, 0x1, 0x4, 0x400, 0xffffffff, {0x77359400}, {0x3, 0x1, 0x7f, 0x10, 0x46, 0xff, "78977a9f"}, 0x3ef28623, 0x3, {}, 0x80}) (async) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000200)=@overlay={0x5, 0x1, 0x4, 0x400, 0xffffffff, {0x77359400}, {0x3, 0x1, 0x7f, 0x10, 0x46, 0xff, "78977a9f"}, 0x3ef28623, 0x3, {}, 0x80}) r7 = syz_open_pts(r5, 0x8402) ioctl$VT_ACTIVATE(r7, 0x5606, 0xfffffffffffffffa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "85e1799a2dbd35d5d1396b00a95d29a959f0c4bdbe0ada318e35b57d317f969636db86c545feaac493fc569112eba0932c45e7cbb9e604176791f222ff81ab115bf0c091f6e749fd55fae936921041c5a7b5ef710265089f3857c28cb147a33ef83c347f571c1873f3ec3d6ff436c08218800321f04baa4a5c98abfd6925cded1958cb7f9228a583d26b9147c07a563521e6d3d1b9f236d31959f69dba547dfa02efcecf649c34f75a82f2c90bbeb271c7504d08b066bd907fc85525429b365c71cd6a9b0f27927f440cb1a37242d02c162885ae25c78f664eb2643497b97b1c87a1f68c66fe97598beff42b91c66fff3dac1985a34030375c3af6a13f1170c5", "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"}) 2m1.909064345s ago: executing program 0 (id=3477): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdb) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async, rerun: 64) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 64) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) socket$inet6(0xa, 0x5, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000) 1m46.851050008s ago: executing program 36 (id=3477): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdb) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async, rerun: 64) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 64) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) socket$inet6(0xa, 0x5, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000) 1m28.225576024s ago: executing program 3 (id=3627): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x13) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002780), 0x82001, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl816\x00', [0x1, 0x5, 0x3, 0x4, 0x5, 0xcc9, 0xf, 0x4, 0xa, 0xfffffffc, 0x2, 0xfffffffd, 0xfffffffe, 0x1, 0x2, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x99, 0xcaa4, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x8, 0xfffffffe, 0x20000, 0xfffffff8]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 1m28.067581619s ago: executing program 3 (id=3629): creat(&(0x7f0000000000)='./file0\x00', 0x1ea) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000008d931d85ccbd46a36da0db6852a0710d54c06d55000672bcfbd724d6fe58e65b43a899b5ad24e334a107f0bc8c9c4f95504b612ade4ace77c9c16943d21fadaa311c3c5ece3215f8338247c4c2c9f3d185d25bc2054ef448a7376f85f6c244bebc3de3d23e278224d6fba0268fd0ca12291f2e7d495bf3b40df263a344ed27c62815ed7b39c2ac8c7afc0c58b7ab37b16c41bf3a3ef6208720862979438a1de692da6bf6c923ba19761a7a4f7796fededb1e44ba6445a244a1be19d176629db6f220", @ANYRES16=r3, @ANYBLOB="010010000000000000000100000006000a004e220000050002000a0000001400090000000000000000000000ffff64010101"], 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x2000000}) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x40000000, 0x3}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000003b040000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000200000006030000ae771949a0cb35d4"], 0x48}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r8, 0x80089203, 0x200000000000000) signalfd(r8, &(0x7f0000000180)={[0x9]}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r9, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r9, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random='\x00 \x00'}, 0x0, {0x2, 0x2, @remote}, 'team0\x00'}) 1m26.985714467s ago: executing program 3 (id=3634): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xa2080, 0x2) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x8) 1m26.759083826s ago: executing program 3 (id=3637): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) futex_waitv(&(0x7f0000001900)=[{0x1, &(0x7f0000000000)=0x1, 0x2}, {0xf15f, &(0x7f0000000080)=0x7fffffff, 0x2}, {0x1, &(0x7f00000000c0)=0x4, 0x82}, {0xfffffffffffffff8, &(0x7f0000000100)=0x6, 0x82}, {0xe, &(0x7f0000000140)=0x3, 0x82}, {0x401, &(0x7f0000000180), 0x2}, {0x4, &(0x7f00000001c0)=0x2, 0x82}, {0x8, &(0x7f0000000200)=0x9, 0x2}, {0x0, &(0x7f0000000240)=0x5, 0x2}, {0xb8bd, &(0x7f0000000280)=0xf9, 0x82}, {0xd, &(0x7f00000002c0)=0x3d42, 0x2}, {0x8, &(0x7f0000000300)=0xf, 0x2}, {0x81, &(0x7f0000000340)=0x1, 0x2}, {0x4, &(0x7f0000000380)=0xf, 0x82}, {0x3, &(0x7f00000003c0)=0x7, 0x82}, {0x100, &(0x7f0000000400)=0x4, 0x82}, {0x1, &(0x7f0000000440)=0x3efdbb60, 0x2}, {0x7fa, &(0x7f0000000480)=0x8, 0x2}, {0x8000, &(0x7f00000004c0)=0x100000001, 0x2}, {0x6, &(0x7f0000000500)=0x5, 0x82}, {0x3, &(0x7f0000000540)=0x81, 0x2}, {0x4fbf, &(0x7f0000000580)=0x3, 0x82}, {0x3080000000000000, &(0x7f00000005c0)=0x6, 0x2}, {0x4, &(0x7f0000000600)=0xfffffffffffffffd}, {0x44db, &(0x7f0000000640), 0x82}, {0x4, &(0x7f0000000680)=0x1, 0x2}, {0xf9, &(0x7f00000006c0)=0x6, 0x2}, {0x89e8, &(0x7f0000000700)=0xe0e2, 0x2}, {0x3, &(0x7f0000000740)=0x7, 0x2}, {0x3, &(0x7f0000000780)=0x4e9b}, {0x0, &(0x7f00000007c0)=0x9, 0x2}, {0x4, &(0x7f0000000800)=0x5, 0x82}, {0x3, &(0x7f0000000840)=0x6, 0x82}, {0x397, &(0x7f0000000880)=0x2, 0x2}, {0x6, &(0x7f00000008c0)=0x1ff, 0x82}, {0x5, &(0x7f0000000900)=0x8, 0x2}, {0xfff, &(0x7f0000000940)=0x9, 0x82}, {0xf33, &(0x7f0000000980)=0xc00000000000000, 0x2}, {0xb3c, &(0x7f00000009c0)=0xb67b, 0x2}, {0x5, &(0x7f0000000a00)=0x2, 0x82}, {0x7, &(0x7f0000000a40)=0xc, 0x2}, {0x2, &(0x7f0000000a80)=0x8000000000000001, 0x2}, {0x2d634b50, &(0x7f0000000ac0)=0x7, 0x82}, {0x2, &(0x7f0000000b00)=0x7, 0x82}, {0xe80, &(0x7f0000000b40)=0xfffffffffffffffb, 0x82}, {0x7, &(0x7f0000000b80)=0xffffffffdb7c4949, 0x82}, {0x7ff, &(0x7f0000000bc0)=0x5, 0x82}, {0x1, &(0x7f0000000c00)=0x5, 0x82}, {0x1ff, &(0x7f0000000c40)=0x8, 0x82}, {0x3308, &(0x7f0000000c80)=0x7fffffffffffffff, 0x2}, {0x7f, &(0x7f0000000cc0)=0x1200000000000, 0x2}, {0x2, &(0x7f0000000d00)=0x2, 0x82}, {0x9, &(0x7f0000000d40)=0x2, 0x2}, {0x7fff, &(0x7f0000000d80)=0xfffffffffffffff1, 0x82}, {0x0, &(0x7f0000000dc0)=0x4, 0x2}, {0x1, &(0x7f0000000e00)=0x7, 0x2}, {0xa9, &(0x7f0000000e40)=0x25e9, 0x82}, {0x8, &(0x7f0000000e80)=0x7, 0x82}, {0x56, &(0x7f0000000ec0)=0x7, 0x82}, {0x7, &(0x7f0000000f00)=0x7, 0x82}, {0x1, &(0x7f0000000f40)=0x98, 0x82}, {0x7, &(0x7f0000000f80)=0x9, 0x82}, {0x5, &(0x7f0000000fc0)=0x1, 0x2}, {0xed5, &(0x7f0000001000)=0x4, 0x2}, {0x8, &(0x7f0000001040)=0x60, 0x2}, {0x8612, &(0x7f0000001080), 0x86}, {0x2, &(0x7f00000010c0), 0x82}, {0xf, &(0x7f0000001100)=0x4, 0x2}, {0x3, &(0x7f0000001140)=0x9, 0x2}, {0x9, &(0x7f0000001180)=0x1, 0x2}, {0x0, &(0x7f00000011c0)=0xd4ca, 0x2}, {0x400, &(0x7f0000001200)=0x4, 0x82}, {0x7, &(0x7f0000001240)=0x80000001, 0x2}, {0x1, &(0x7f0000001280)=0xfffffffffffffff9, 0x82}, {0xffffffffffffffff, &(0x7f00000012c0)=0x920, 0x82}, {0x7, &(0x7f0000001300)=0x6, 0x2}, {0xf, &(0x7f0000001340)=0x3, 0x2}, {0x2, &(0x7f0000001380)=0x100000000, 0x82}, {0x1, &(0x7f00000013c0)=0x1ff, 0x2}, {0x39, &(0x7f0000001400)=0x7fff, 0x82}, {0x5, &(0x7f0000001440)=0x6, 0x82}, {0x3, &(0x7f0000001480)=0xf963, 0x2}, {0x2d7, &(0x7f00000014c0)=0x6, 0x82}, {0x3, &(0x7f0000001500)=0x1, 0x82}, {0x0, &(0x7f0000001540)=0x80, 0x2}, {0x7ff, &(0x7f0000001580)=0x2, 0x82}, {0xff, &(0x7f00000015c0)=0x180000}, {0x100, &(0x7f0000001600)=0x7fffffff, 0x82}, {0x5, &(0x7f0000001640), 0x82}, {0x4, &(0x7f0000001680)=0xfff, 0x82}, {0x1, &(0x7f00000016c0)=0xf, 0x41}, {0x5, &(0x7f0000001700)=0x1000, 0x82}, {0x2, &(0x7f0000001740)=0x4, 0x80}, {0x0, &(0x7f0000001780)=0x8e, 0x82}, {0x2, &(0x7f00000017c0)=0x8, 0x2}, {0x7, &(0x7f0000001800)=0x3a4, 0x2}, {0x9, &(0x7f0000001840)=0x3, 0x2}, {0x9, &(0x7f0000001880)=0x1, 0x82}, {0x3, &(0x7f00000018c0)=0x5, 0x82}], 0x63, 0x0, &(0x7f0000002280)={0x0, 0x3938700}, 0x1) 1m25.949423986s ago: executing program 3 (id=3643): bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b5122113", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe", 0x4e}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9"], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m25.749968103s ago: executing program 3 (id=3645): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdb) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0x11}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 1m10.079810483s ago: executing program 37 (id=3645): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdb) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0x11}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 44.719855874s ago: executing program 7 (id=3871): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x4000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 43.815607562s ago: executing program 7 (id=3874): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r1, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x8, 0x80, {0x80, 0xc, "23cc70e2634b79da717ef3bdc3c15fa780f3511053435feb64a11f89274830cead5fdd81edfcc11275bd1ddcd4b20854632dca5405839346dee5a5944d6045d4ce9c65b5862fd948e9c797144f68de59274686294012c95f198a7f0b52f7db019d36ae27f19707aa53d5faa691d94f35a596efe6a16fbb047c5bb0909e54"}}, &(0x7f0000000440)={0x0, 0x3, 0xff, @string={0xff, 0x3, "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"}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000580)={0x20, 0xc, 0xec, "30da76ce01d85080c944240607eafd3aac5cdc33a43c4df831bc7dafa59166d21fcae6ba1cb38d00f4655e7422ff30c1178a2ea0b0fd14c7672f9132fc996a5547c879de1cab1831d28a89fdb9d2df77353c8820571a4be57e99a2d0a1a99f19f424b079e9a772de93f8f6c72b6d93a2c9346c8ebab50513c663d7ced1e36404cf32bcb03136f8fe25d2360425fd2496a2dd41f43690b187e538fd8c01ae86080e7f666deb1aa77b48b5401ee6483f47e3ad5501c981e3993ed280926d8b55bdd44d121547f64f0f9ce3ddf1d7375da125d669cb08a2bb9e974cc9cd976840f2e2893aefd7d26b89d55ee448"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000002c0)={0xc0, 0x5, 0x6, "756653b9b0a1"}, &(0x7f0000000300)={0x40, 0x5, 0x2, "0d88"}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4001af83, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xb, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000) 40.706493622s ago: executing program 7 (id=3883): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x2, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3fc, 0x10, 0x1, {0x22, 0xcf7}}}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x62, @string={0x62, 0x3, "aecacdcaaecd767680e0c9dc598f61165a2cd8e7e874c5d7646011142c896502267ade20c1d523181efbb87d54acb4fc8537c82b2b1e7bfb1b7472ea7d7ca56a4d294f1d599ff5e746f67294c8472b9e49d500d9d68445226fea746d4a364bf3"}}}, 0x0) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x2, @multicast}, 0x10) process_mrelease(r1, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 37.574722724s ago: executing program 7 (id=3898): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x260a00, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) (async) pread64(r0, &(0x7f0000000140)=""/211, 0xd3, 0x6) 37.411761224s ago: executing program 7 (id=3900): r0 = socket(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x1, 0x85}]}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) (async) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x598f8d822e732217}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01e826bd7000fcdbdf250300000008000500e0000001080004000a01010008000400ac14143e0500010000000000a2866df1"], 0x34}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000840)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) (async, rerun: 64) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000191401"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffb, 0x1}) (async) ioctl$SNDRV_PCM_IOCTL_FORWARD(r6, 0x40084149, &(0x7f0000000340)=0x6) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f081550000a000000f0100180045000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c30f5966baf80cb8c087678eef66bac60ced45c194710a000000058a3bc4827dbcae009008f2", 0x56}], 0x1, 0x48, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r10, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x6f, &(0x7f0000000100)=[@cr4={0x1, 0x8ea}], 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) (async, rerun: 64) brk(0x689d80000000) (rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r7, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x4c}}, 0xc041) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 34.759811841s ago: executing program 7 (id=3912): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x6c}}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x406f) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x8083, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x6c}}, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x3ff) (async) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x406f) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x8083, 0x0) (async) 19.689126168s ago: executing program 38 (id=3912): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x6c}}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x406f) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x8083, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x6c}}, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x3ff) (async) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x406f) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x8083, 0x0) (async) 5.907244414s ago: executing program 1 (id=4031): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdb) (async) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdb) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x100010, r1, 0x5708c000) 5.503609722s ago: executing program 9 (id=4036): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) splice(r0, &(0x7f0000000080)=0xc, 0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0x6, 0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r1, 0x57789000) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000551000/0x400000)=nil) 5.407827146s ago: executing program 9 (id=4037): lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="953f5374606334bea9246dd8cce0fddab9b1900da8874bb8ccff7bde78d4317851e49c2d2ecd577bbfdf27cdac1dea6e63446182e896f01350c9def7cfb4ca5a9bd21cc2c1", 0x45}, {&(0x7f0000000180)="b4111d81801ce3de298ff4e153f1b7e55d762fcce654e629da3cfeace9511fb6967ca6e15c775db5656e53ac3a24c1fd9f4a4809f1a40dccde7bc2e71e6636ff2f5d02cdd00ca84d8c0768cb41118f24e3a0acee1ddf66e01ca1bf62a70c4945ca0fc3e064e21afada4a2f323586a128fc6b8693c05c22d234c3", 0x7a}, {&(0x7f0000000200)="3ac4ff7b9c1e51e14205b91fc6a53562dccdea14535dcec7bbf3a7d99a09527f97390138e97014f96d093ca47393bb54b5784bab19eea00e2daf1322a4cbc219418ec47fb86821c53cc07f174f8dd16ce2fbc4d3f6c9c6011dd69156e5ea146b8947c70cf2e68379d5f2e43e71bba4970840d0111ebbc8dc62ecc59124e54a568dd6c188522bce519874d029ae64aa9945337c07faab2836f0ada1f66becfca597d3b826f39c95e57a164da27ace073da76075e0ce18cbbd83", 0xb9}, {&(0x7f00000002c0)="c800ac52ede19540f106449a8c573b92db64b7e7f2594afad3ee1d6f5a0a02f2c8d7c29afccc854a62927c1ec363ccf6fac66e406226e20d77e2b0a82c50230e44417f19456130468b802e879d841df5eef1e80a714ed36d94741e44da75f2b28468c84602a0c2e55740c7dcb1a77342dc9698a1b7619fabd164efe91fd97d9aad9bebb99f5c9c89fb8c98a77a2076e8f6cc2ffd6453ee9a798c06edeb996de8d641aa5535ecb5acdd7e6965791a190d6cb61640ef18503a102f1bd7058501a2a4d9b08bc0fa7b79d3ddd73d08816806907be801c68989edccead7a5a2de0a107c22c50dcd03dda175d2770933cb675387789584f150", 0xf6}], 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r2, 0x0, 0xce, 0x0, &(0x7f0000000740)) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f0000000280)) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) lseek(r2, 0xfffffffffffffffb, 0x2) r5 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r5, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x19, 0x2, "f3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f0000000480)="0c00433b8c0f3bedf6ba82cc8bce6eee4f00e360", 0xfffffffffffffeba, 0x814, &(0x7f0000000140)={0x2, 0x0, @private=0xa010101}, 0x10) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) sendfile(r7, r7, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 2.085188691s ago: executing program 9 (id=4051): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x34, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "2c9bf624d607a5a9e2843fe8ae6632d02ffd8f9dd4c5e64fc65ac033b7a87c1f", "1c1e66c29869bf688917a2ed3835dc1d9e81b84960aca558453c4565abe3dcd8", "d1157590637541abeca20b9ca73977b269091c8aca21e3a616010dc44053ec09", "0f83ee263df12a6401579dcd55e31d69df95ecfcd41b0b75ef367a2297d352fc", "eef1d2fa3c932f1f8ebfc1874010684213066050ad07a2af725a1cc11d7e0bd6", "ce579275bc602e7bd0597b59", 0xa, 0xfffffffd, 0x1c, 0x3, 0x6}}) (async) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000040)={0x0, "f8f44fa604e0937938b160bc0f359ebf496ac2d64cd825060102dda9631d379f"}) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r4, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:restorecond_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x10) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 1.879699479s ago: executing program 1 (id=4053): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000380)='./bus\x00', 0x72) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f00000003c0)='./file1\x00', 0x80500, 0x718bb647156ec3d7) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file0\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') removexattr(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)=@known='security.selinux\x00') write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @remote}}}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'lo\x00', &(0x7f00000004c0)=@ethtool_eee={0x44, 0x8, 0xfffff801, 0x3, 0x3, 0xffffffc0, 0xfffffff7, 0x7fffffff, [0x4, 0x7]}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000240)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000580)=0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001640)={{r4}, r6, 0x8, @unused=[0x345, 0x4, 0x3, 0x1], @name="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"}) bind$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001"], 0x122}}, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file1\x00') r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x40044160, 0x3) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x6, 0x3) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) 1.878637977s ago: executing program 9 (id=4054): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c00018006000100020000006e49263a409865220800060003000000b5d0ff4de05973afd2c34b3ca1c2293cecda1870ac21a53e0f68768b6948c9ffddb8f6526319eb8a2455e673ca8051602ead13badb23875b030dc63b069fda3d7abf99e770310dbcb8f6d4206812c08bf9963a6c623d0bce1316a1c5f00f877e00242eaee9c0df6698695fac9b"], 0x30}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165642, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002528bf5088205cae60bd3010203010902"], 0x0) write(r5, &(0x7f0000000400)="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", 0x1f000) 1.755575136s ago: executing program 1 (id=4056): sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x40851}, 0x4004891) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresgid(0xee01, 0x0, 0x0) (async) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) (async) setgid(0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x201}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464", 0xb1}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000006c0)=""/149, 0x95}], 0x2, &(0x7f00000002c0)=""/199, 0xc7}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x100}, 0xc) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) r6 = getpgid(0x0) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20}, 0x0) connect$rds(r2, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 1.579734681s ago: executing program 1 (id=4058): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f00000016c0)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd52a44fec4f6f1a6f65158bb6911c295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2971f29d9364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b42a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e807df4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfdb0c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681a03007e871befae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22f3bb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed49dcfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7c5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cf8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46070039116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fb930e7a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4bc700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4305531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x32000c, 0x0) 1.471701842s ago: executing program 6 (id=4060): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)={0x4e8, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_FRAME={0x429, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac, {0x9}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1012, 0x7, @device_a, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x12}, {0xc}, {0xc, 0x1}, {0x9, 0x1}]}, @val={0x2d, 0x1a, {0x300, 0x0, 0x0, 0x0, {0x10001, 0x3, 0x0, 0x259, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x800, 0x3}}, [{0xdd, 0x13, "c0178b979ea0907e64f86dc8c879099b75bee1"}, {0xdd, 0x9a, "88d9b8d5c21239e0b21953bdfe843cd036b2d09fe760cde293125a05811e5b983addd14710acc51caeb0966ed41097077157afaf9385d1fe3303b163b88cafe118d234b5ff37c231ced120ba0f36522819481494b0f3cccd1a7c0f5e9292c5b98f08405436b43d1943b75befd8cf732371b66eaf5e2a8de5445ba39c8eb372bd7866e58eefb8d4713523cedb1d4b873b43e603f3fa21c30edb99"}, {0xdd, 0xa9, "d5a4d8297fbb8c8028ba2426756193db09436af3f391e9f8fb57810d3b71d9ae99301a8de0d3e711b4427a346d4a60ffcf7cb078cdbe2b2f2b685075b465f009a64dc2314feb46d32d6297160bb4c33660855abac6a3f721001d14f2ebe8cb924c0324bce143b348195b390aaacc68ba9f94e18aea4eddc69af2cac48020347429fe058daf5ff505cdae3d25fd9ef4fbd934a34be741d9c3499e5176116e20e5aa7f09bace36812885"}, {0xdd, 0x94, "e40d9b7894cdaf3963247290e8bc27036e97a326d1167f1edca6c27def93331b627994b9cc997bdbbaab5eb4a0d8dd5d0f465717b4949e8e5ae7abb2322969cd470445bd60b3c6f1777295fff0f928c58f0b2f4ad7a02597cc2fc309ca27787e1300158ff2cf258c7b685400a6508c28762f3d783bcf1a8c50a1ddc108c56b7edcf8b6d20938bb8fd59c22f0557470c10b543ac3"}, {0xdd, 0xd5, "2c3a0de19d84258be5670c8b009a46515ee3b108a03f155dd97b1790ff57c2f1803b26cc9e776ad948f39111b449a685f6808c988471f98cb87ebf5c177eabc67a48c63b39de322fbb397e9191661ddc4b90c164f6535f86ecf858a1d4e09dd1585b87428463251a153629f9b8834b0f881fc6a34af1feccc60fa3ee6266645588f238e684c9c86f41562c962862a24d31ee7b8e234bd127467668fab21465d359ad01bc0b7abc878ef37e1b68afbb05f53d0a7a3084305c6d7faabdd16c41cc98262d71cdc121c8fae5491a669cffba6dab60dfb7"}, {0xdd, 0x6a, "f48e7192a754ab5f2dcdd09e083dbf93438466070cec5f40d1fbff00074eee0ac62178866a45c6b02174638bdbc4c7aa9390e672864aec7b4c2f2e0703619300256db29560a5736fd0196f32315a643cd23b0ef29943c1b6e512251ec8f5f97714b9cd3fabe4633465c9"}, {0xdd, 0x9e, "c7eb2efa02debe2c942e23933974f567a22ea8e4212a8738de284f2c37d6959159eb7691a0bb8e01593b5798fc53a843a2781805fe02bb45bba707f1ccd30fbda62a097693785d8ef747ef40d7cfff8177948def618aa0c026672ffc91e4805cd289f724e46a63d4e7b7b1bb9a86c505a9cc3398fd1363c5e7b876d32cbf3300f4b0cb417b1a23519e1c7a2fbc98bd5989e92537928970ec7c1c1e96146e"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbb0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1000}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25d}]]}, 0x4e8}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xd10d, 0x1, 0x0, 0x4}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x5}}, 0xe8) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) (async) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'multiq3\x00', [0x9df, 0x2566, 0xfffffffe, 0x100000, 0x15d, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x101, 0x20005, 0x344, 0x1ff, 0x4, 0x0, 0x4, 0x4, 0x9, 0xa, 0x100, 0x1005, 0x7, 0xa, 0x2, 0x3, 0xb0c4, 0x7df, 0x8, 0x400007, 0xffffffff]}) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43370e9703890723f97e46bb", 0xd3}], 0x1}, 0x20004804) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) (rerun: 64) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 1.466535725s ago: executing program 1 (id=4061): ioprio_set$pid(0x1, 0x0, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0xf, 0x677ec255, 0x0, 0x0, 0xc8e, 0xfffffe00, 0x5}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0xc8}}, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) 1.36669127s ago: executing program 6 (id=4062): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000180), 0x4) (async) getsockopt$inet6_int(r3, 0x29, 0x10, 0x0, &(0x7f0000000080)) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) (async) recvfrom(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) 1.271728654s ago: executing program 6 (id=4063): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000003, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000100)={{0x3, 0x5}, 0x4}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363168a2559f334d436138406b699de69cb13fd737428808940bcd0940dc930c81aaad8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be6f2b546c27ebfdb041df6bbc2d10b61eb755df569c9cb7c4951ddb54505f67244cd16e376fbbdebc994d22a474b7bc494cafcac137748c8ebff7807053222d67c3ee79861e8cf4ff092236fccfbe08dcb5d7c2ba08b25883740695452a401800e63c157d64d90e4108e5eb8e917c00e9e52df03723ce3", 0x12b}, {&(0x7f0000000f80)="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", 0x208}], 0x2}, 0x8010) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r2) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0xe, 0x7, @vifc_lcl_addr=@remote, @multicast1}, 0x10) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x7) close_range(r5, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000208000140000000160900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9100) sendmsg$rds(r5, &(0x7f0000000580)={&(0x7f0000002200)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000002380)=[@mask_fadd={0x58, 0x114, 0x8, {{0x3, 0xffff9b0c}, 0x0, 0x0, 0xcf, 0x7, 0x7, 0x3, 0x4a, 0x5}}, @rdma_map={0x5f, 0x114, 0x3, {{0x0}, 0x0, 0x24}}], 0x88, 0x40000}, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000140)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x2004}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x2c39000) 1.071822688s ago: executing program 6 (id=4065): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[=', 0x2}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r1, r2}}}], 0x20, 0x40044}}], 0x1, 0x4) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x9ddc584ba9d3ca90, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_off}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@flag='async'}, {@permit_directio}, {@euid_lt={'euid<', r2}}, {@permit_directio}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file0\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') write$tcp_congestion(r3, &(0x7f0000000000)='highspeed\x00', 0xa) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') getpid() r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xff01, &(0x7f0000000200)) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f00000004c0)=@in6={0xa, 0x4e21, 0x100, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x194e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="bff3f4d4ae31a0c52266175f85b86763adab1f6ab998ed9be250d2f5b1096f7b", 0x20}, {&(0x7f0000000240)="3f431c73872d412fafb30d7edb654f56f9ae39cc1a030b92629807947756dcbbebb4db65408062ad835fad60d5c3", 0x2e}, {&(0x7f00000005c0)="d0f036e48fef7100017bef54269945fa78dedeb11cba8e583b752908407c729b0fc4eb7e6112d204853b699d1d250c99c3c9e3b60b3a933d2973eb88fa40377d475a9805f4a9e12d2b9879e2861378b5944e415ac1c7bbc2a5492ce1df6a9ae3110c9ed716a572c116f257f43a08fddfd18292ccae787119d64ac3dcea50dbbb6d6bf9e753cd50697d12a6f0f6ad24571958db7eae24f343e9942c6c2cc7f6a150074fabb2eb111a62e8", 0xaa}], 0x3}, 0x200000c3) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) 1.011804732s ago: executing program 8 (id=4066): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000440)={0x14, &(0x7f00000002c0)={0x40, 0x23, 0xcf, {0xcf, 0x11, "962ebcadb4e781e3fb57ab1756ce58a54268c8036e8cbfa7b30b745334547e3b79976ffaddc94004c68b2a2f7ed5f0b888ea26e9437962a1cebaf5cabff7fab68879abe90c16be9594a3ab046d07380c3fae27c7378b53b957255ac47cbb837d59976ec052ecfdac47ac29f89f6eda0b6be086be955468f679d21f3f757dad49881a4627a28b010edce1ace42d3141fecc49b40e3df2c8113f68d143a286006cd54de333e28ac7148ff2343d335a0114c13b47c6d305cce5478f40de9a3d2b226252dba551ac9b251ba30b4116"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x40, 0x7, 0x96, "44fe35e1f06cb300af2f0e8117b9089f92f0447d8ba239a81d04cc9ebb088b69b5d954ce2ad08ceb78028425681b1f4b191442b5bb4e9bac7d4ac9fc7b1727c8f52bed550715c5e0b514ddc8a9c1057c68f026431dfc79b16852ca71bffcbcfe2b0c72ffc56a1e2a9d76f6354c8552d9fd84d249abf7a6e03ae473be4bb2ac5837efa5e206330d1ffe988960c6a5c0ab07e640947ba5"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0xc0, 0x5, 0x6, "a9ed6e9be0ab"}, &(0x7f0000000600)}) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x98, 0xa00) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) (rerun: 64) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, 0x4e23, 0x200, 0x4e21, 0x9, 0x2, 0x0, 0x0, 0x21, r3, r4}, {0x3, 0x3, 0x6, 0x2, 0x509, 0xe651, 0xb, 0x4}, {0x70, 0xb7, 0x1, 0x7}, 0x0, 0x6e6bb0, 0x1, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x4, 0x0, 0x5d, 0xd, 0x2, 0x8}}, 0xe8) 954.637091ms ago: executing program 6 (id=4067): r0 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x2a2480) close(r0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000005c0)={0x1, 0xd6, "66eed0f126664e08dbf3e8b296c411c5e6c7b5e48a7316bee656e1f4fbbbc1997af3c79a423d95b20fd9f997ef6f416c4f19f11b19bb3d3a10d0f4a7963d0ea5ed22784fc63f4e43998d64756643105752b4b3a2428ec2f4b16a09d8423f65d76fc0291a426b06f42bc89647c653242ea6576c4ed3683241bf7745859cb5ff21298a3d77bdcd74ad5a2582fe3f419f75fb60040fb6640d4b26dfc1eb8bba3b61c480cab7186b9304088816725c966e32439a1c5b361e6f119ad76cec86c997c712d0ba3da7780f07508455e7d05a622f6ca9e8fdb2f2"}) creat(&(0x7f0000000140)='./file0\x00', 0x41) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000000)=0x1) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0x6, 0x1f, 0x406}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0xdb, 0x6, 0xfffffff8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x40, 0x403, 0xc}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000400)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x7, 0x4000ffe, 0x800}) dup(r4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket(0x2b, 0x80801, 0xf7fffffe) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r9, 0xffffffff80000500, 0x0, 0x0) recvmsg$can_raw(r9, &(0x7f0000000900)={&(0x7f00000003c0)=@qipcrtr, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/211, 0xd3}, 0x20) bind$unix(r8, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 946.670747ms ago: executing program 8 (id=4068): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file0\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000540)='./file0\x00', 0x108) (fail_nth: 18) 865.843491ms ago: executing program 8 (id=4069): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a40)={&(0x7f0000000080)=[{0x1, 0x2809, 0x0, 0x0}], 0x1}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r2, 0x200}, &(0x7f00000001c0)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xccf5, 0xf001, 0x7ff, 0x400, 0x0, 0x14, r4}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000060c000/0x2000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 727.579552ms ago: executing program 6 (id=4070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) personality(0x800000) (async) personality(0x800000) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000100001050000000700000000fc01000000000000000000000000000100000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="e0000002000000000000000000000000000000046c000000fe8000000000000000000000000000bb02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000050000000000000004000000000000000a000000000000000a00000000000000000000000004000000000000fcffffff000000000a0002062000000000000000480003"], 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0x8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x4}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xbd}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0x8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x4}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xbd}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = dup(r8) ioctl$PTP_EXTTS_REQUEST2(r9, 0xc0603d06, &(0x7f0000000300)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000080)={r2}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000080)={r2}) r10 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000100), 0xfffffd9d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r10, 0x10, &(0x7f00000001c0)={0x1}) socket$kcm(0x2d, 0x2, 0x0) (async) r12 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000340)={r12}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r7, 0x7dfff000) openat$cgroup_ro(r9, &(0x7f0000000200)='blkio.bfq.time\x00', 0x0, 0x0) 726.859952ms ago: executing program 8 (id=4071): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r3, 0xc01, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r9) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r10, 0x5, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048805}, 0x20000810) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x81) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x20, r13, 0x60b, 0x70bd2b, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44800}, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r3, 0xc01, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r9) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r10, 0x5, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048805}, 0x20000810) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x81) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x20, r13, 0x60b, 0x70bd2b, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44800}, 0x0) (async) fadvise64(r0, 0x92, 0x5, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000) (async) 593.520882ms ago: executing program 9 (id=4072): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x8001, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, 0x0}}], 0x1, 0x931766f6319eed40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r5, 0xae71, &(0x7f00000002c0)={[{0x3}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) (async) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000100)) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='proc\x00', 0x808000, 0x0) 383.796574ms ago: executing program 1 (id=4073): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165642, 0x0) (rerun: 32) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) write(r0, &(0x7f0000000400)="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", 0x1000) 382.777548ms ago: executing program 8 (id=4074): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659}}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000200)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000100)={0x7, 'vlan0\x00', {0xe}, 0x9}) fadvise64(r1, 0x92, 0x5, 0x4) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)=""/52, &(0x7f00000001c0)=0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 337.863µs ago: executing program 8 (id=4075): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async) flock(0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x15) (async) r3 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000200)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f00000003c0)={&(0x7f0000004000)=[0xfffffffd, 0x101, 0x238, 0x40, 0x7, 0x2, 0x4, 0x9, 0x0, 0x2, 0x7, 0x81, 0x3, 0x3, 0x7, 0x2, 0x5, 0x4, 0x60, 0x7, 0x200, 0xa3f, 0x9a, 0x8, 0x9, 0x8, 0x9, 0x1000, 0x6, 0x0, 0x2e, 0x3, 0x7e, 0x7, 0x6c9d3c45, 0x401, 0x7, 0xfffffff9, 0x8, 0x7d, 0x5, 0x24f4, 0x1000, 0x6, 0xe, 0x7fffffff, 0x1ff, 0x2, 0x3ea8, 0xb32, 0x0, 0x3, 0x6, 0xff, 0x6, 0x4, 0x3, 0x7f, 0xb7, 0x7, 0x5, 0x401, 0x9, 0x5, 0x5, 0x2, 0xff, 0x0, 0x3, 0x5, 0xfffffff7, 0x8, 0x2, 0xe8, 0x1, 0x6, 0xcef3, 0xfffffff9, 0x1, 0x5, 0x1000, 0x9, 0x400, 0x8f, 0x0, 0xcabc, 0x7, 0x5, 0xa, 0x6, 0x2, 0xd34, 0x265, 0x3, 0x8, 0x49, 0x8, 0x1000, 0x0, 0x5, 0x4, 0xaf, 0xffffffff, 0x9, 0x5, 0x80000000, 0x9, 0x6, 0x97df, 0x6, 0x800, 0x7ff, 0x18ff, 0x3, 0x3, 0x8, 0xfff, 0xfb, 0x3, 0x5, 0x4, 0x1, 0xffff, 0x8, 0x3, 0x3, 0x7db, 0x7f, 0x6, 0x2, 0x8, 0x3ff, 0xfd, 0x9, 0x4, 0x3, 0x6, 0x3, 0x2, 0xfffffffa, 0x4, 0x339, 0xfffffff0, 0x3, 0x9, 0x1, 0xf, 0x6, 0x800, 0xc791, 0x6, 0xfd, 0x1, 0x10040000, 0x3, 0x8, 0x9, 0x101, 0x0, 0x6, 0x5, 0x7fffffff, 0x4, 0x5, 0x2, 0x6, 0x4, 0x80, 0x4, 0x0, 0x8, 0x6, 0x0, 0x43df, 0x1, 0x54eb, 0x80, 0x80000000, 0x5, 0xfffffffd, 0x9, 0x9, 0x7, 0x5, 0x10, 0x8, 0xfffffff7, 0x0, 0x8, 0xc, 0x8, 0x6, 0x800, 0x6, 0x3, 0x3ff, 0x2, 0x3, 0x2, 0x3, 0x0, 0x4e, 0x5, 0xffff, 0x6, 0xc3, 0x0, 0x4, 0xe3, 0x9, 0x4, 0xfff, 0x5, 0x10000, 0x2, 0xcff, 0x6, 0x4, 0x100, 0x3, 0x6, 0x8, 0xfffffff7, 0x0, 0x200, 0x7f, 0x5, 0x42, 0x3, 0x6, 0x411af549, 0x0, 0x22ce, 0x0, 0x6, 0x2428, 0x1, 0x3, 0x9, 0x8001, 0x81, 0x7, 0x3, 0x4, 0x10000000, 0x6, 0x8, 0x7, 0xc8, 0x401, 0xc9f3, 0xd6, 0x800, 0x4, 0x1, 0xf1b, 0x2, 0x3ae44413, 0x534c, 0x2, 0x28, 0x80000000, 0xffffffff, 0x200, 0xfffff025, 0x3, 0x6, 0x0, 0xfff, 0x6, 0x4, 0x9, 0x5c7115a2, 0x10, 0x6, 0x3, 0x6, 0x0, 0x8, 0x81, 0x8, 0x1, 0x3, 0x4, 0x9, 0x1, 0x4, 0x4, 0x4, 0x101, 0x3, 0x4730, 0x7, 0x5, 0x6e87, 0x7, 0x2, 0x8, 0xffffffff, 0xd, 0x8, 0x8000, 0x4, 0x8, 0xa, 0xfffffff9, 0x8, 0x9, 0x2, 0x8, 0x2, 0x0, 0xcdb2, 0x800, 0x1, 0x7, 0xdd8f, 0x7f0a, 0x5, 0x3, 0x80000001, 0x7fffffff, 0x5, 0x2, 0x1, 0x80000000, 0x3ff, 0x9, 0x1, 0x81, 0x4, 0x1, 0x7, 0x8, 0x2, 0x8, 0x1, 0x8, 0x0, 0x2, 0x4, 0x0, 0x6, 0x4, 0xbb0e, 0x5022, 0x4, 0xfffffffd, 0xe, 0x7, 0x2, 0x6, 0x3, 0x1000, 0x8, 0x3, 0x6, 0x7, 0x800, 0x7f5, 0x3ff, 0xf1, 0x4, 0x7, 0x9fc, 0x80000001, 0xfffffffb, 0x1, 0x1, 0x3, 0x5, 0x4, 0x4, 0x8, 0x1, 0x8, 0x0, 0x8, 0x8001, 0x3, 0x0, 0xa, 0x6a1f, 0x0, 0x22, 0x9, 0x6c000000, 0x6, 0x80, 0x1, 0x6, 0x40, 0x5cb2, 0x8, 0x2, 0x9, 0xffff7e5c, 0x800, 0x120, 0x7fff, 0x8, 0x401, 0x29, 0x80000000, 0x1, 0x0, 0x8, 0x8, 0xffffe110, 0x5, 0xef0, 0x6, 0x9, 0x9845, 0xe, 0x170, 0x5, 0x3, 0x5, 0x7ad, 0x3, 0x9, 0x5, 0x4, 0x0, 0x6, 0x5d, 0x7, 0x940, 0xebc, 0xffffff20, 0x800, 0x4, 0x0, 0x203b, 0x0, 0x9, 0x7, 0x7, 0x63b, 0xe, 0x7ff, 0x5bf9, 0x9, 0x5, 0xf3, 0x200, 0x0, 0x7, 0xc000, 0x8, 0x7, 0x50, 0x4da, 0xd, 0x3, 0x7, 0x50d, 0x3, 0x1, 0x1, 0x7, 0x2c16f915, 0x8001, 0x800, 0x1, 0x4, 0x2, 0xa, 0x5d, 0x6, 0xb, 0x0, 0x6, 0x6, 0x6, 0x80000001, 0x7b, 0x400, 0x7, 0xe0, 0x3, 0x9d8, 0x3f, 0x5, 0x9, 0x1, 0x5, 0x0, 0xfffffe00, 0x5, 0x0, 0xd, 0xfffffff4, 0xd2, 0x7, 0x9, 0x80000000, 0x4, 0x5, 0xffffffe9, 0x1ff, 0xbc, 0x1, 0x200, 0x6, 0x5, 0x9, 0x6, 0xfffffffb, 0x805, 0x2, 0xffffffff, 0xff, 0x3, 0xf, 0x0, 0x3, 0x8, 0x6, 0x6, 0x100000, 0xfffffff3, 0x6, 0x6, 0x28, 0x8, 0x5, 0x0, 0xc0000000, 0x401, 0x1, 0x2, 0x7, 0x4, 0x8, 0xb, 0x2000009, 0x1, 0x5, 0xffffffff, 0x3efc, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x6, 0xfe, 0x5, 0x7, 0x112b, 0xff, 0x3, 0x20, 0x1, 0x36a, 0x1, 0xa, 0x400, 0x2afcad61, 0x0, 0x4, 0xccfc, 0x100000, 0x9, 0x800, 0xa, 0x7, 0x2, 0x1, 0x7, 0x4, 0xe, 0x1000, 0x3, 0x1, 0x9, 0xacf, 0x6, 0x3, 0x800, 0x8, 0x9338, 0x7, 0x9, 0x9, 0x71, 0x3, 0x1ff, 0x80, 0xd98b, 0x8, 0x2, 0x1, 0x5, 0x4, 0x5, 0x5, 0x3, 0x9, 0x2, 0x0, 0x101, 0x66, 0x6, 0x2, 0x7, 0xfffffffc, 0x8, 0x40, 0x1, 0x4, 0x5, 0x2, 0x9, 0xc1cc, 0x3ff, 0x2, 0x8, 0x4b, 0x3, 0x0, 0x40, 0xd, 0x0, 0x3571, 0x6, 0x0, 0x8000000, 0x8469, 0x3, 0x80000000, 0x0, 0x7e1, 0x4, 0x2b, 0x6, 0xf7d9, 0x9, 0x5, 0xc00d, 0x3, 0x403, 0x80000000, 0xe600, 0x7, 0xc, 0x80000001, 0x401, 0x4, 0x5, 0x3, 0x9, 0xf3f, 0x1, 0xfffffffe, 0x9, 0x1, 0x3, 0x4, 0x2, 0x84, 0x448f, 0x0, 0x8, 0x100, 0x9, 0x7992, 0x4, 0x9, 0x4, 0x3, 0x0, 0x5, 0x9, 0x1, 0x8000, 0x1ff, 0xffff1364, 0x80000001, 0x67, 0xc, 0xdf2, 0x4, 0x7, 0x8, 0x756, 0x3, 0xfffffc00, 0xc9, 0x7, 0xce, 0x8, 0x0, 0x6, 0x0, 0x9, 0x8, 0x8, 0x9, 0x1, 0x6, 0xa7, 0x10000, 0xfffff801, 0x6, 0x31fe, 0x28, 0x10, 0x8020000, 0x2, 0x1, 0x2, 0x1, 0x8, 0x1, 0xecc, 0x3, 0x0, 0x4, 0x6, 0x6, 0x80, 0xfcb, 0x7, 0x9, 0x7, 0xe, 0x1000, 0x3, 0xffffffff, 0xa4, 0x0, 0xffffffff, 0x8, 0x0, 0x40, 0x1, 0xfffffff8, 0x0, 0x2, 0x7, 0x81, 0x400, 0x2, 0xa255, 0x1, 0xbd1e, 0xc, 0x8, 0x401, 0x9, 0x0, 0x400, 0x1, 0x700, 0x9, 0x1, 0x0, 0x7, 0x80000001, 0x4, 0x4, 0x0, 0x400, 0xfff, 0x0, 0x5cb, 0x2, 0x9, 0x1, 0x3, 0x7fffffff, 0xfffffffe, 0x6, 0x5, 0xfffffffd, 0x80000001, 0x2, 0x7fffffff, 0x1ff, 0x101, 0x77960, 0xbc0, 0x81, 0x800, 0xfff, 0x7f, 0x7ff, 0x5, 0x6, 0x0, 0x7, 0x81, 0x0, 0x0, 0x9, 0xe, 0xfffffffd, 0xf1fb, 0x1, 0xe3c, 0x3, 0x9, 0xc5c9ca61, 0xa, 0x3, 0xfffffff9, 0xc8aa, 0xb2, 0x3ff, 0xd9, 0x81, 0xffff, 0xffff, 0xfffffc00, 0xadf, 0x5, 0x6, 0x4, 0x6, 0x7, 0x6, 0x2, 0x2, 0xd6, 0x8, 0x5b0, 0x2, 0x8000, 0x7, 0x6, 0x0, 0x1, 0x2, 0x0, 0x39d, 0x9, 0x3ff, 0x8000, 0xb, 0x5, 0x7, 0x3, 0x8, 0x19, 0xfffffff0, 0x7, 0x9, 0xb5a, 0x101, 0x1, 0x3, 0x10000, 0x4, 0xe, 0x3ff, 0xe, 0x3, 0x0, 0x7ff, 0x1, 0x404d, 0x6, 0x3ff, 0x0, 0xce, 0x6, 0x2, 0x4, 0x0, 0x3, 0x7, 0x81, 0x6, 0x8, 0xb54, 0x9, 0x31, 0x80000001, 0x3ff, 0x7, 0x9, 0x400, 0x1, 0xe7, 0x8, 0x8001, 0x2, 0x7, 0x5, 0x9, 0x7ff, 0x6, 0x3, 0x80000001, 0x800, 0x3c8, 0x43b, 0x101, 0x7, 0x7, 0x7f, 0x7, 0x7f, 0x10000, 0x9, 0xd31, 0xfb27, 0x3, 0x3, 0x3, 0x1, 0x7, 0x5, 0xd63, 0x4, 0x80000001, 0x10001, 0x6, 0xa, 0x5, 0x8, 0x6, 0x7, 0x9, 0x526, 0x5, 0x8, 0x2, 0x8, 0x2, 0x53, 0xa, 0xc9ad, 0x8, 0xf3, 0x80, 0x9, 0x9, 0x3, 0x7ff, 0x1, 0x1ff, 0x15, 0x3bb, 0x3, 0x1, 0x2, 0x2, 0x4, 0x140, 0xb, 0x0, 0x0, 0x3, 0x6, 0x1, 0x90a0, 0x2, 0x1b6, 0x0, 0x1, 0xc6bd, 0x3, 0xfffffffc, 0x1, 0x295d, 0x7, 0x96, 0x3, 0x3, 0x9, 0x5, 0x2, 0xe7c, 0x3, 0xfffffffa, 0x6, 0x8, 0x1, 0x1, 0x3, 0x9, 0x3, 0x6, 0x8, 0x0, 0x8, 0x0, 0x2, 0x5, 0x8, 0x7, 0x6, 0x720b, 0x10, 0x1, 0x5, 0x3, 0x3, 0x8000, 0xfffffffe, 0x7, 0x7, 0x6f, 0x9, 0xb, 0x3, 0xc, 0x3326c296, 0x3, 0xcd, 0x5, 0x2, 0x7, 0xffff, 0x80, 0x2, 0x4, 0xf4f1], 0x6, 0x400}) (async) flock(r0, 0x2) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) (async) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) keyctl$clear(0x7, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1, 0x2, 0x0) select(0x52, &(0x7f0000000100)={0x0, 0x400000, 0x0, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x9, 0x10000, 0x1, 0x3000000, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28b3dc88adf176cabd000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf2504000000140001800800050003000000060001000a000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12) (async) r7 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r7, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) stat(&(0x7f0000000240)='./cgroup\x00', &(0x7f0000000280)) 0s ago: executing program 9 (id=4076): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000001240)) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x7, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) (async, rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000000)=0x5, 0x4) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.685612][T18230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.953019][T18227] chnl_net:caif_netlink_parms(): no params data found [ 698.339967][T18227] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.359156][T18227] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.386346][T18227] bridge_slave_0: entered allmulticast mode [ 698.406012][T18227] bridge_slave_0: entered promiscuous mode [ 698.425587][T18227] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.432834][T18227] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.443721][ T1211] usb 1-1: USB disconnect, device number 20 [ 698.457770][T18227] bridge_slave_1: entered allmulticast mode [ 698.475230][T18227] bridge_slave_1: entered promiscuous mode [ 698.502047][ T3558] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.568401][T18227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.593833][T18227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.617220][ T3558] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.720822][T18227] team0: Port device team_slave_0 added [ 698.780351][ T3558] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.830161][T18227] team0: Port device team_slave_1 added [ 698.894951][ T3558] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.033996][ T30] audit: type=1326 audit(1756266432.115:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18256 comm="syz.6.3558" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb26118ebe9 code=0x0 [ 699.096442][T18227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.134146][T18227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.193919][T18262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.199191][T18227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.215831][T18262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.238148][T18252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.241875][T18227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.261588][T18227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.267572][T18252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.321034][T18227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.418678][T18227] hsr_slave_0: entered promiscuous mode [ 699.442913][T18227] hsr_slave_1: entered promiscuous mode [ 699.459746][T18227] debugfs: 'hsr0' already exists in 'hsr' [ 699.496972][T18227] Cannot create hsr debugfs directory [ 699.575034][ T5874] Bluetooth: hci2: command tx timeout [ 699.613008][ T3558] bridge_slave_1: left allmulticast mode [ 699.620459][ T3558] bridge_slave_1: left promiscuous mode [ 699.634901][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.643692][ T3558] bridge_slave_0: left allmulticast mode [ 699.651263][ T3558] bridge_slave_0: left promiscuous mode [ 699.659392][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.799769][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.809806][ T3558] bond_slave_0: left promiscuous mode [ 699.821388][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.994800][ T3558] bond_slave_1: left promiscuous mode [ 700.001397][ T3558] bond0 (unregistering): Released all slaves [ 700.056368][T18252] batadv_slave_1: entered promiscuous mode [ 700.072239][T18251] batadv_slave_1: left promiscuous mode [ 700.600441][T18227] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 700.630543][T18227] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 700.679422][T18227] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 700.704669][T18227] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 701.656113][ T5874] Bluetooth: hci2: command tx timeout [ 702.080885][ T3558] hsr_slave_0: left promiscuous mode [ 702.091092][ T3558] hsr_slave_1: left promiscuous mode [ 702.101706][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.116096][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.128996][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.146097][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.169582][ T3558] veth1_macvtap: left promiscuous mode [ 702.176332][ T3558] veth0_macvtap: left promiscuous mode [ 702.182779][ T3558] veth1_vlan: left promiscuous mode [ 702.191090][ T3558] veth0_vlan: left promiscuous mode [ 702.480143][T18314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.523994][T18314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.538135][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 702.566721][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 702.734086][T18309] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 702.904661][T18227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.937383][T18227] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.986405][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.993536][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.007262][T18320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.047377][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.054559][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.083251][T18320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.121793][T18227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 703.532674][T18227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.734379][ T5874] Bluetooth: hci2: command tx timeout [ 704.064106][T18227] veth0_vlan: entered promiscuous mode [ 704.121375][T18227] veth1_vlan: entered promiscuous mode [ 704.190035][T18227] veth0_macvtap: entered promiscuous mode [ 704.227105][T18227] veth1_macvtap: entered promiscuous mode [ 704.287063][T18365] /dev/rnullb0: Can't open blockdev [ 704.308605][T18227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.366073][T18227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.451376][ T60] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.481212][ T60] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.654455][ T60] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.717206][ T60] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.198008][T18381] /dev/rnullb0: Can't open blockdev [ 705.814699][ T5874] Bluetooth: hci2: command tx timeout [ 705.957821][T18380] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3577'. [ 706.071328][T18388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.093359][T18377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3577'. [ 706.115767][T18388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.189195][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.209667][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.256885][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.274978][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.999467][T18421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.100799][T18421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.246613][T18421] /dev/rnullb0: Can't open blockdev [ 708.475156][T18442] program syz.8.3593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 708.512967][T18442] /dev/rnullb0: Can't open blockdev [ 708.800813][T18444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.906761][T18444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.079660][T18459] /dev/rnullb0: Can't open blockdev [ 709.107245][T18459] /dev/rnullb0: Can't open blockdev [ 709.209208][T18444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.263522][T18444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.499669][T18476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.594716][T18476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.598901][T18477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.739090][T18477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.087241][T18476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.087361][ T5919] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 710.171525][T18490] netlink: 'syz.6.3605': attribute type 6 has an invalid length. [ 710.184686][T18476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.254426][ T5919] usb 9-1: device descriptor read/64, error -71 [ 711.044454][ T5919] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 711.112929][T18502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.131895][T18502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.184419][ T5919] usb 9-1: device descriptor read/64, error -71 [ 711.295911][ T5919] usb usb9-port1: attempt power cycle [ 712.104668][ T5919] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 712.124754][ T5919] usb 9-1: device descriptor read/8, error -71 [ 712.584380][ T5919] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 712.605036][ T5919] usb 9-1: device descriptor read/8, error -71 [ 712.612988][T18507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.639032][T18507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.834596][ T5919] usb usb9-port1: unable to enumerate USB device [ 713.202276][T18517] block nbd3: Attempted send on invalid socket [ 713.249083][T18517] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 713.304774][T18517] EXT4-fs (nbd3): unable to read superblock [ 713.732279][T18527] virt_wifi0 speed is unknown, defaulting to 1000 [ 714.054449][ T6360] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 714.204377][ T6360] usb 9-1: Using ep0 maxpacket: 8 [ 714.217255][ T6360] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.278684][T18537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.359961][T18537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.559118][ T6360] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 714.559149][ T6360] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.564790][ T6360] usb 9-1: config 0 descriptor?? [ 714.616913][ T6360] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 714.727232][T18545] binder: 18544:18545 ioctl c00c6211 0 returned -14 [ 715.696778][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3627'. [ 715.754811][T18557] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 715.762328][T18557] /dev/rnullb0: Can't open blockdev [ 716.424495][ T6360] gspca_vc032x: reg_w err -110 [ 716.429361][ T6360] vc032x 9-1:0.0: probe with driver vc032x failed with error -110 [ 716.922280][T18578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.969525][T18578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.981036][T18577] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 717.036757][T18577] /dev/rnullb0: Can't open blockdev [ 717.526990][T18590] @: renamed from vlan0 (while UP) [ 717.985405][T18598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.994185][T18598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.189921][T18608] virt_wifi0 speed is unknown, defaulting to 1000 [ 718.660239][T18625] /dev/rnullb0: Can't open blockdev [ 718.877896][T18635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3651'. [ 718.914502][T18637] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 718.921078][T18637] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 718.979283][T18637] vhci_hcd vhci_hcd.0: Device attached [ 719.035148][T18638] vhci_hcd: connection closed [ 719.035776][ T7657] vhci_hcd: stop threads [ 719.072620][ T7657] vhci_hcd: release socket [ 719.097653][ T7657] vhci_hcd: disconnect device [ 719.154600][ T10] vhci_hcd: vhci_device speed not set [ 719.324953][ T5897] usb 9-1: USB disconnect, device number 6 [ 719.924411][ T5897] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 720.045321][T18679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.085193][T18679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.104037][ T5897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.117750][ T5897] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 720.144365][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.170394][ T5897] usb 9-1: config 0 descriptor?? [ 720.624056][ T5897] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 720.665339][ T5897] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0027/input/input45 [ 720.703839][ T5912] hid (null): unknown global tag 0xd [ 720.721456][ T5912] hid-generic 0008:0005:000F.0028: reserved main item tag 0xe [ 720.744401][ T5912] hid_parser_main: 22 callbacks suppressed [ 720.744426][ T5912] hid-generic 0008:0005:000F.0028: unknown main item tag 0x4 [ 720.774355][ T5912] hid-generic 0008:0005:000F.0028: unknown main item tag 0x6 [ 720.790025][ T5912] hid-generic 0008:0005:000F.0028: unknown main item tag 0x1 [ 720.802793][ T5912] hid-generic 0008:0005:000F.0028: unknown main item tag 0x5 [ 720.842715][ T5912] hid-generic 0008:0005:000F.0028: unknown global tag 0xd [ 720.861251][ T5897] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 720.883826][ T5912] hid-generic 0008:0005:000F.0028: item 0 1 1 13 parsing failed [ 720.935232][ T5912] hid-generic 0008:0005:000F.0028: probe with driver hid-generic failed with error -22 [ 720.998460][T18701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.074111][T18701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.105633][ T36] tipc: Subscription rejected, illegal request [ 721.116555][T18705] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3662'. [ 721.147786][T18705] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3662'. [ 721.205222][T18650] batadv_slave_1: entered promiscuous mode [ 721.223040][T18649] batadv_slave_1: left promiscuous mode [ 721.361917][T18709] /dev/rnullb0: Can't open blockdev [ 721.369214][ T5897] usb 9-1: USB disconnect, device number 7 [ 721.975574][T18716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 722.002957][T18727] /dev/rnullb0: Can't open blockdev [ 722.296918][T18734] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 722.318911][T18736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.371149][T18736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.541360][T18742] /dev/rnullb0: Can't open blockdev [ 722.939556][T18753] /dev/rnullb0: Can't open blockdev [ 723.135735][T18757] FAULT_INJECTION: forcing a failure. [ 723.135735][T18757] name failslab, interval 1, probability 0, space 0, times 0 [ 723.187731][T18757] CPU: 0 UID: 0 PID: 18757 Comm: syz.7.3676 Not tainted syzkaller #0 PREEMPT(full) [ 723.187763][T18757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 723.187775][T18757] Call Trace: [ 723.187784][T18757] [ 723.187792][T18757] dump_stack_lvl+0x189/0x250 [ 723.187827][T18757] ? __pfx____ratelimit+0x10/0x10 [ 723.187861][T18757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 723.187889][T18757] ? __pfx__printk+0x10/0x10 [ 723.187915][T18757] ? fs_reclaim_acquire+0x7d/0x100 [ 723.187937][T18757] ? __pfx___might_resched+0x10/0x10 [ 723.187957][T18757] ? lock_acquire+0x5f/0x360 [ 723.187975][T18757] should_fail_ex+0x414/0x560 [ 723.188003][T18757] should_failslab+0xa8/0x100 [ 723.188023][T18757] kmem_cache_alloc_noprof+0x73/0x390 [ 723.188050][T18757] ? getname_flags+0xb8/0x540 [ 723.188074][T18757] getname_flags+0xb8/0x540 [ 723.188098][T18757] __x64_sys_mkdir+0x5d/0x80 [ 723.188116][T18757] do_syscall_64+0xfa/0xfa0 [ 723.188141][T18757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.188161][T18757] ? clear_bhb_loop+0x60/0xb0 [ 723.188183][T18757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.188201][T18757] RIP: 0033:0x7f5031d8ebe9 [ 723.188219][T18757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.188236][T18757] RSP: 002b:00007f5032b5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 723.188260][T18757] RAX: ffffffffffffffda RBX: 00007f5031fb5fa0 RCX: 00007f5031d8ebe9 [ 723.188274][T18757] RDX: 0000000000000000 RSI: 0000000000000108 RDI: 0000200000000540 [ 723.188287][T18757] RBP: 00007f5032b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 723.188300][T18757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.188312][T18757] R13: 00007f5031fb6038 R14: 00007f5031fb5fa0 R15: 00007ffd8802d648 [ 723.188333][T18757] [ 723.792440][T18759] netlink: 'syz.7.3677': attribute type 11 has an invalid length. [ 723.820873][T18759] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3677'. [ 724.017701][T18767] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3680'. [ 725.373142][T18789] FAULT_INJECTION: forcing a failure. [ 725.373142][T18789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.409800][T18789] CPU: 1 UID: 0 PID: 18789 Comm: syz.6.3685 Not tainted syzkaller #0 PREEMPT(full) [ 725.409830][T18789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 725.409843][T18789] Call Trace: [ 725.409850][T18789] [ 725.409858][T18789] dump_stack_lvl+0x189/0x250 [ 725.409890][T18789] ? __pfx____ratelimit+0x10/0x10 [ 725.409914][T18789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.409942][T18789] ? __pfx__printk+0x10/0x10 [ 725.409970][T18789] ? rcu_is_watching+0x15/0xb0 [ 725.409993][T18789] should_fail_ex+0x414/0x560 [ 725.410021][T18789] strncpy_from_user+0x36/0x290 [ 725.410047][T18789] getname_flags+0xf3/0x540 [ 725.410073][T18789] __x64_sys_mkdir+0x5d/0x80 [ 725.410091][T18789] do_syscall_64+0xfa/0xfa0 [ 725.410123][T18789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.410142][T18789] ? clear_bhb_loop+0x60/0xb0 [ 725.410162][T18789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.410181][T18789] RIP: 0033:0x7fb26118ebe9 [ 725.410198][T18789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.410214][T18789] RSP: 002b:00007fb2620b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 725.410237][T18789] RAX: ffffffffffffffda RBX: 00007fb2613b5fa0 RCX: 00007fb26118ebe9 [ 725.410252][T18789] RDX: 0000000000000000 RSI: 0000000000000108 RDI: 0000200000000540 [ 725.410264][T18789] RBP: 00007fb2620b2090 R08: 0000000000000000 R09: 0000000000000000 [ 725.410277][T18789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.410289][T18789] R13: 00007fb2613b6038 R14: 00007fb2613b5fa0 R15: 00007ffd18001d88 [ 725.410310][T18789] [ 725.858281][T18791] /dev/rnullb0: Can't open blockdev [ 726.146329][T18798] /dev/rnullb0: Can't open blockdev [ 727.012924][T18817] /dev/rnullb0: Can't open blockdev [ 727.059474][T18819] FAULT_INJECTION: forcing a failure. [ 727.059474][T18819] name failslab, interval 1, probability 0, space 0, times 0 [ 727.104391][T18819] CPU: 1 UID: 0 PID: 18819 Comm: syz.8.3696 Not tainted syzkaller #0 PREEMPT(full) [ 727.104421][T18819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 727.104433][T18819] Call Trace: [ 727.104440][T18819] [ 727.104449][T18819] dump_stack_lvl+0x189/0x250 [ 727.104481][T18819] ? __pfx____ratelimit+0x10/0x10 [ 727.104504][T18819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.104531][T18819] ? __pfx__printk+0x10/0x10 [ 727.104557][T18819] ? fs_reclaim_acquire+0x7d/0x100 [ 727.104575][T18819] ? rcu_is_watching+0x15/0xb0 [ 727.104596][T18819] ? __pfx___might_resched+0x10/0x10 [ 727.104615][T18819] ? lock_acquire+0x5f/0x360 [ 727.104632][T18819] should_fail_ex+0x414/0x560 [ 727.104656][T18819] should_failslab+0xa8/0x100 [ 727.104675][T18819] kmem_cache_alloc_lru_noprof+0x78/0x390 [ 727.104701][T18819] ? __d_alloc+0x36/0x7a0 [ 727.104726][T18819] __d_alloc+0x36/0x7a0 [ 727.104752][T18819] d_alloc+0x4b/0x190 [ 727.104774][T18819] ? lookup_one_qstr_excl+0xc8/0x360 [ 727.104808][T18819] lookup_one_qstr_excl+0xdc/0x360 [ 727.104833][T18819] filename_create+0x224/0x3c0 [ 727.104849][T18819] ? __might_fault+0xb0/0x130 [ 727.104873][T18819] ? rcu_is_watching+0x15/0xb0 [ 727.104894][T18819] ? __pfx_filename_create+0x10/0x10 [ 727.104913][T18819] do_mkdirat+0xa0/0x590 [ 727.104939][T18819] ? __pfx_do_mkdirat+0x10/0x10 [ 727.104956][T18819] ? getname_flags+0x1e5/0x540 [ 727.104979][T18819] __x64_sys_mkdir+0x6c/0x80 [ 727.104996][T18819] do_syscall_64+0xfa/0xfa0 [ 727.105019][T18819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.105037][T18819] ? clear_bhb_loop+0x60/0xb0 [ 727.105056][T18819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.105073][T18819] RIP: 0033:0x7f747558ebe9 [ 727.105090][T18819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.105107][T18819] RSP: 002b:00007f7476478038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 727.105128][T18819] RAX: ffffffffffffffda RBX: 00007f74757b5fa0 RCX: 00007f747558ebe9 [ 727.105142][T18819] RDX: 0000000000000000 RSI: 0000000000000108 RDI: 0000200000000540 [ 727.105153][T18819] RBP: 00007f7476478090 R08: 0000000000000000 R09: 0000000000000000 [ 727.105165][T18819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.105177][T18819] R13: 00007f74757b6038 R14: 00007f74757b5fa0 R15: 00007fff934c9408 [ 727.105199][T18819] [ 727.533378][T18821] tipc: Started in network mode [ 727.548797][T18821] tipc: Node identity dacc549a8ace, cluster identity 4711 [ 727.654695][T18821] tipc: Enabled bearer , priority 0 [ 727.846609][T18836] /dev/rnullb0: Can't open blockdev [ 728.035060][T18820] tipc: Resetting bearer [ 728.249010][T18820] tipc: Disabling bearer [ 728.517222][T18849] binder: 18848:18849 ioctl c0306201 200000000240 returned -14 [ 728.544495][ T6360] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 728.694463][ T6360] usb 9-1: device descriptor read/64, error -71 [ 728.944454][ T6360] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 729.094473][ T6360] usb 9-1: device descriptor read/64, error -71 [ 729.224856][ T6360] usb usb9-port1: attempt power cycle [ 729.586372][ T6360] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 729.635125][ T6360] usb 9-1: device descriptor read/8, error -71 [ 729.830484][T18867] netlink: 212384 bytes leftover after parsing attributes in process `syz.7.3713'. [ 729.839869][T18867] openvswitch: netlink: Message has 512 unknown bytes. [ 729.850140][T18867] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 729.894520][ T6360] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 729.916183][ T6360] usb 9-1: device descriptor read/8, error -71 [ 730.029264][ T6360] usb usb9-port1: unable to enumerate USB device [ 730.135655][T18878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.167348][T18878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.259077][T18882] devpts: Bad value for 'max' [ 730.269780][T18883] devpts: Bad value for 'max' [ 730.586225][T18891] /dev/rnullb0: Can't open blockdev [ 730.688688][T18893] binder: BINDER_SET_CONTEXT_MGR already set [ 730.696313][T18893] binder: 18892:18893 ioctl 4018620d 200000000040 returned -16 [ 730.939258][T18901] netlink: 428 bytes leftover after parsing attributes in process `syz.6.3722'. [ 730.980509][T18901] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3722'. [ 731.173452][T18906] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 731.204194][T18906] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 731.232956][T18906] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 732.094392][ T9065] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 732.233906][ T30] audit: type=1400 audit(1756266465.315:52): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=18916 comm="syz.6.3730" [ 732.255692][ T9065] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.274951][ T9065] usb 9-1: config 0 interface 0 has no altsetting 0 [ 732.281611][ T9065] usb 9-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 732.309588][ T9065] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.334974][ T9065] usb 9-1: config 0 descriptor?? [ 732.561245][ T9065] magicmouse 0003:05AC:0269.0029: unknown main item tag 0x3 [ 732.574474][ T9065] magicmouse 0003:05AC:0269.0029: unknown main item tag 0x7 [ 732.594768][ T9065] magicmouse 0003:05AC:0269.0029: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.8-1/input0 [ 732.888095][T18930] FAULT_INJECTION: forcing a failure. [ 732.888095][T18930] name failslab, interval 1, probability 0, space 0, times 0 [ 733.104472][T18930] CPU: 1 UID: 0 PID: 18930 Comm: syz.6.3733 Not tainted syzkaller #0 PREEMPT(full) [ 733.104502][T18930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 733.104514][T18930] Call Trace: [ 733.104523][T18930] [ 733.104532][T18930] dump_stack_lvl+0x189/0x250 [ 733.104567][T18930] ? __pfx____ratelimit+0x10/0x10 [ 733.104591][T18930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.104618][T18930] ? __pfx__printk+0x10/0x10 [ 733.104644][T18930] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 733.104667][T18930] ? __pfx___might_resched+0x10/0x10 [ 733.104688][T18930] ? lock_acquire+0x5f/0x360 [ 733.104707][T18930] should_fail_ex+0x414/0x560 [ 733.104735][T18930] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 733.104756][T18930] should_failslab+0xa8/0x100 [ 733.104775][T18930] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 733.104793][T18930] kmem_cache_alloc_lru_noprof+0x78/0x390 [ 733.104819][T18930] ? ovl_alloc_inode+0x2c/0xa0 [ 733.104840][T18930] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 733.104857][T18930] ovl_alloc_inode+0x2c/0xa0 [ 733.104875][T18930] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 733.104891][T18930] alloc_inode+0x67/0x1b0 [ 733.104913][T18930] new_inode+0x22/0x170 [ 733.104933][T18930] ovl_new_inode+0x1c/0x50 [ 733.104953][T18930] ovl_create_object+0x158/0x310 [ 733.104977][T18930] ? __pfx_ovl_create_object+0x10/0x10 [ 733.105000][T18930] ? apparmor_path_mkdir+0x1a7/0x220 [ 733.105019][T18930] ? make_vfsgid+0x49/0xa0 [ 733.105044][T18930] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 733.105070][T18930] ovl_mkdir+0x2b/0x40 [ 733.105094][T18930] vfs_mkdir+0x306/0x510 [ 733.105115][T18930] do_mkdirat+0x247/0x590 [ 733.105143][T18930] ? __pfx_do_mkdirat+0x10/0x10 [ 733.105163][T18930] ? getname_flags+0x1e5/0x540 [ 733.105188][T18930] __x64_sys_mkdir+0x6c/0x80 [ 733.105206][T18930] do_syscall_64+0xfa/0xfa0 [ 733.105232][T18930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.105251][T18930] ? clear_bhb_loop+0x60/0xb0 [ 733.105272][T18930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.105290][T18930] RIP: 0033:0x7fb26118ebe9 [ 733.105307][T18930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.105325][T18930] RSP: 002b:00007fb2620b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 733.105347][T18930] RAX: ffffffffffffffda RBX: 00007fb2613b5fa0 RCX: 00007fb26118ebe9 [ 733.105362][T18930] RDX: 0000000000000000 RSI: 0000000000000108 RDI: 0000200000000540 [ 733.105375][T18930] RBP: 00007fb2620b2090 R08: 0000000000000000 R09: 0000000000000000 [ 733.105387][T18930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.105399][T18930] R13: 00007fb2613b6038 R14: 00007fb2613b5fa0 R15: 00007ffd18001d88 [ 733.105421][T18930] [ 734.204438][ T9065] usb 9-1: USB disconnect, device number 12 [ 734.228429][T18933] /dev/rnullb0: Can't open blockdev [ 734.536239][ T5897] usb 4-1: USB disconnect, device number 6 [ 734.561281][T18946] overlayfs: upper fs does not support tmpfile. [ 734.709828][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 734.719147][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 734.721190][T18954] /dev/rnullb0: Can't open blockdev [ 734.726525][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 734.758995][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 734.767329][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 734.839965][T18950] virt_wifi0 speed is unknown, defaulting to 1000 [ 734.961853][T18949] batadv_slave_1: entered promiscuous mode [ 735.007547][T18948] batadv_slave_1: left promiscuous mode [ 735.139017][T18950] chnl_net:caif_netlink_parms(): no params data found [ 735.212572][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.373422][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.477439][T18950] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.574441][T18950] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.582109][T18950] bridge_slave_0: entered allmulticast mode [ 735.595484][T18950] bridge_slave_0: entered promiscuous mode [ 735.605795][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.646183][T18963] FAULT_INJECTION: forcing a failure. [ 735.646183][T18963] name failslab, interval 1, probability 0, space 0, times 0 [ 735.659589][T18950] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.674592][T18963] CPU: 0 UID: 0 PID: 18963 Comm: syz.8.3742 Not tainted syzkaller #0 PREEMPT(full) [ 735.674620][T18963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 735.674631][T18963] Call Trace: [ 735.674638][T18963] [ 735.674645][T18963] dump_stack_lvl+0x189/0x250 [ 735.674677][T18963] ? __pfx____ratelimit+0x10/0x10 [ 735.674701][T18963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.674727][T18963] ? __pfx__printk+0x10/0x10 [ 735.674753][T18963] ? fs_reclaim_acquire+0x7d/0x100 [ 735.674771][T18963] ? rcu_is_watching+0x15/0xb0 [ 735.674793][T18963] ? __pfx___might_resched+0x10/0x10 [ 735.674813][T18963] ? lock_acquire+0x5f/0x360 [ 735.674832][T18963] should_fail_ex+0x414/0x560 [ 735.674858][T18963] should_failslab+0xa8/0x100 [ 735.674876][T18963] kmem_cache_alloc_noprof+0x73/0x390 [ 735.674901][T18963] ? security_inode_alloc+0x39/0x330 [ 735.674927][T18963] security_inode_alloc+0x39/0x330 [ 735.674952][T18963] inode_init_always_gfp+0x9ed/0xdc0 [ 735.674976][T18963] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 735.674996][T18963] alloc_inode+0x82/0x1b0 [ 735.675016][T18963] new_inode+0x22/0x170 [ 735.675039][T18963] ovl_new_inode+0x1c/0x50 [ 735.675061][T18963] ovl_create_object+0x158/0x310 [ 735.675087][T18963] ? __pfx_ovl_create_object+0x10/0x10 [ 735.675120][T18963] ? apparmor_path_mkdir+0x1a7/0x220 [ 735.675138][T18963] ? make_vfsgid+0x49/0xa0 [ 735.675163][T18963] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 735.675191][T18963] ovl_mkdir+0x2b/0x40 [ 735.675215][T18963] vfs_mkdir+0x306/0x510 [ 735.675235][T18963] do_mkdirat+0x247/0x590 [ 735.675253][T18963] ? __pfx_do_mkdirat+0x10/0x10 [ 735.675272][T18963] ? getname_flags+0x1e5/0x540 [ 735.675296][T18963] __x64_sys_mkdir+0x6c/0x80 [ 735.675314][T18963] do_syscall_64+0xfa/0xfa0 [ 735.675338][T18963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.675356][T18963] ? clear_bhb_loop+0x60/0xb0 [ 735.675375][T18963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.675393][T18963] RIP: 0033:0x7f747558ebe9 [ 735.675411][T18963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.675428][T18963] RSP: 002b:00007f7476478038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 735.675459][T18963] RAX: ffffffffffffffda RBX: 00007f74757b5fa0 RCX: 00007f747558ebe9 [ 735.675474][T18963] RDX: 0000000000000000 RSI: 0000000000000108 RDI: 0000200000000540 [ 735.675487][T18963] RBP: 00007f7476478090 R08: 0000000000000000 R09: 0000000000000000 [ 735.675500][T18963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.675512][T18963] R13: 00007f74757b6038 R14: 00007f74757b5fa0 R15: 00007fff934c9408 [ 735.675533][T18963] [ 735.947208][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.954841][T18950] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.962057][T18950] bridge_slave_1: entered allmulticast mode [ 735.969131][T18950] bridge_slave_1: entered promiscuous mode [ 736.137030][T18950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.188219][T18950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.207357][T18968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.268920][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.292141][T18968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.326591][T18950] team0: Port device team_slave_0 added [ 736.348791][T18950] team0: Port device team_slave_1 added [ 736.359400][T18968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.407578][T18968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.436845][T18950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.457016][T18950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.510303][T18950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.534952][T18950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.548160][T18950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.574191][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.599984][T18950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.737293][T18950] hsr_slave_0: entered promiscuous mode [ 736.755338][T18950] hsr_slave_1: entered promiscuous mode [ 736.771679][ T60] bridge_slave_1: left allmulticast mode [ 736.779461][ T60] bridge_slave_1: left promiscuous mode [ 736.790466][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.822503][ T60] bridge_slave_0: left allmulticast mode [ 736.830796][ T60] bridge_slave_0: left promiscuous mode [ 736.844668][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.856281][ T5874] Bluetooth: hci1: command tx timeout [ 737.075555][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.105052][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.118686][ T60] bond0 (unregistering): Released all slaves [ 737.325789][ T60] tipc: Left network mode [ 737.564901][T18950] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 737.602140][T18950] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 737.647457][T18987] batadv_slave_1: entered promiscuous mode [ 737.654057][T18985] batadv_slave_1: left promiscuous mode [ 737.666189][T18950] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 737.719625][T18950] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 738.114747][ T60] hsr_slave_0: left promiscuous mode [ 738.136765][ T60] hsr_slave_1: left promiscuous mode [ 738.142695][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.164352][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.185447][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.214404][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.240585][ T60] veth1_macvtap: left promiscuous mode [ 738.250504][ T60] veth0_macvtap: left promiscuous mode [ 738.274647][ T60] veth1_vlan: left promiscuous mode [ 738.279988][ T60] veth0_vlan: left promiscuous mode [ 738.388235][ T60] pim6reg9 (unregistering): left allmulticast mode [ 738.549182][ T60] team0 (unregistering): Port device team_slave_1 removed [ 738.573426][ T60] team0 (unregistering): Port device team_slave_0 removed [ 738.707927][T19018] batadv_slave_0: entered promiscuous mode [ 738.724865][T19017] batadv_slave_0: left promiscuous mode [ 738.800815][T18950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.850632][T18950] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.875424][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.882596][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.905039][T19028] overlayfs: conflicting options: nfs_export=on,index=off [ 738.928561][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.935881][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.943846][ T5874] Bluetooth: hci1: command tx timeout [ 739.361987][ T60] IPVS: stop unused estimator thread 0... [ 739.417215][T18950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.570505][T19056] /dev/rnullb0: Can't open blockdev [ 739.932788][T19072] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 739.945772][T19061] batadv_slave_1: entered promiscuous mode [ 739.956189][T19060] batadv_slave_1: left promiscuous mode [ 739.991018][T19072] qnx6: wrong signature (magic) in superblock #1. [ 740.016882][T18950] veth0_vlan: entered promiscuous mode [ 740.052584][T19072] qnx6: unable to read the first superblock [ 740.066766][T18950] veth1_vlan: entered promiscuous mode [ 740.126515][T18950] veth0_macvtap: entered promiscuous mode [ 740.158329][T18950] veth1_macvtap: entered promiscuous mode [ 740.218375][T18950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.251051][T18950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.281145][ T3558] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.297137][ T3558] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.346718][ T3558] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.370440][ T3558] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.472905][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.499320][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.589247][T19094] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3765'. [ 740.600460][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.622539][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.014734][ T5874] Bluetooth: hci1: command tx timeout [ 741.503096][T19144] ./cgroup: Can't lookup blockdev [ 741.633932][T19150] kvm: user requested TSC rate below hardware speed [ 741.953958][T19162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.974403][ T5919] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 742.009632][T19162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.056706][T19167] /dev/rnullb0: Can't open blockdev [ 742.132503][ T5919] usb 9-1: device descriptor read/64, error -71 [ 742.384410][ T5919] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 742.515670][ T5919] usb 9-1: device descriptor read/64, error -71 [ 742.563397][T19180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 742.624740][ T5919] usb usb9-port1: attempt power cycle [ 742.884875][ T5912] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 743.004183][ T5919] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 743.066388][ T5919] usb 9-1: device descriptor read/8, error -71 [ 743.074178][ T5912] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.085877][ T5912] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.096897][ T5874] Bluetooth: hci1: command tx timeout [ 743.114402][ T5912] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 743.126579][ T5912] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.140804][ T5912] usb 10-1: config 0 descriptor?? [ 743.302007][T19206] virt_wifi0 speed is unknown, defaulting to 1000 [ 743.322276][ T5919] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 743.360519][ T5919] usb 9-1: device descriptor read/8, error -71 [ 743.418257][T19215] /dev/rnullb0: Can't open blockdev [ 743.484783][ T5919] usb usb9-port1: unable to enumerate USB device [ 743.766159][T19222] program syz.6.3796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 743.818924][T19222] /dev/rnullb0: Can't open blockdev [ 744.357419][T19183] /dev/rnullb0: Can't open blockdev [ 744.364022][T19210] /dev/rnullb0: Can't open blockdev [ 744.375614][ T5912] uclogic 0003:256C:006D.002A: v1 frame probing failed: -71 [ 744.383033][ T5912] uclogic 0003:256C:006D.002A: failed probing parameters: -71 [ 744.394947][ T5912] uclogic 0003:256C:006D.002A: probe with driver uclogic failed with error -71 [ 744.416328][ T5912] usb 10-1: USB disconnect, device number 2 [ 744.462885][T19226] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 744.949404][T19240] netlink: 'syz.9.3801': attribute type 10 has an invalid length. [ 744.965992][T19240] veth0_vlan: left promiscuous mode [ 744.972515][T19240] veth0_vlan: entered promiscuous mode [ 744.978030][T19242] /dev/rnullb0: Can't open blockdev [ 744.980581][T19240] team0: Device veth0_vlan failed to register rx_handler [ 745.566765][ T5912] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 745.725620][ T5912] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.737513][ T5912] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 745.757822][ T5912] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 745.767576][ T5912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.776593][ T5912] usb 9-1: Product: syz [ 745.784356][ T5951] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 745.784629][ T5912] usb 9-1: Manufacturer: syz [ 745.799831][ T5912] usb 9-1: SerialNumber: syz [ 745.925427][ T5951] usb 10-1: device descriptor read/64, error -71 [ 746.164577][ T5951] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 746.285746][ T5912] usb 9-1: 0:2 : does not exist [ 746.528060][T19258] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 746.544391][T19258] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 746.550915][T19258] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 746.557604][T19258] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 746.574394][T19258] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 746.581972][T19258] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 746.637556][T19262] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 746.644686][T19262] /dev/rnullb0: Can't open blockdev [ 746.650990][T19262] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 746.658271][T19262] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 746.666401][T19262] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 746.673034][T19262] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 746.679936][T19262] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 746.687361][T19262] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 746.724429][ T5951] usb 10-1: device descriptor read/64, error -71 [ 746.760729][ T5897] usb 9-1: USB disconnect, device number 17 [ 746.800709][T19266] /dev/rnullb0: Can't open blockdev [ 746.834632][ T5951] usb usb10-port1: attempt power cycle [ 746.864812][T19269] /dev/rnullb0: Can't open blockdev [ 747.039039][T19272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.087125][T19272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.499251][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.506483][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.794361][ T5951] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 747.816030][ T5951] usb 10-1: device descriptor read/8, error -71 [ 747.891930][T19284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 747.903964][T19284] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 747.911304][T19284] /dev/rnullb0: Can't open blockdev [ 748.074372][ T5951] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 748.104994][ T5951] usb 10-1: device descriptor read/8, error -71 [ 748.217284][ T5951] usb usb10-port1: unable to enumerate USB device [ 748.634596][T19307] /dev/rnullb0: Can't open blockdev [ 748.672195][T19308] tipc: Can't bind to reserved service type 2 [ 749.454508][ T5951] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 749.594497][ T5951] usb 10-1: device descriptor read/64, error -71 [ 749.834838][ T5951] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 749.974606][ T5951] usb 10-1: device descriptor read/64, error -71 [ 750.104582][ T5951] usb usb10-port1: attempt power cycle [ 750.464392][ T5951] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 750.485347][ T5951] usb 10-1: device descriptor read/8, error -71 [ 750.724370][ T5951] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 750.745195][ T5951] usb 10-1: device descriptor read/8, error -71 [ 750.857043][ T5951] usb usb10-port1: unable to enumerate USB device [ 751.374422][ T5912] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 751.525704][ T5912] usb 9-1: config 0 has an invalid interface number: 175 but max is 0 [ 751.533946][ T5912] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.554643][ T5912] usb 9-1: config 0 has no interface number 0 [ 751.561376][ T5912] usb 9-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 751.590044][ T5912] usb 9-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 751.616220][ T5912] usb 9-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 751.634340][ T5912] usb 9-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 751.658338][ T5912] usb 9-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 751.683527][ T5912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.702501][ T5912] usb 9-1: Product: syz [ 751.714693][ T5912] usb 9-1: Manufacturer: syz [ 751.719343][ T5912] usb 9-1: SerialNumber: syz [ 751.735664][ T5912] usb 9-1: config 0 descriptor?? [ 751.747723][ T5912] symbolserial 9-1:0.175: symbol converter detected [ 751.770088][ T5912] usb 9-1: symbol converter now attached to ttyUSB0 [ 751.792589][T19361] /dev/rnullb0: Can't open blockdev [ 751.965006][ T5912] usb 9-1: USB disconnect, device number 18 [ 751.980519][ T5912] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 752.004733][ T5912] symbolserial 9-1:0.175: device disconnected [ 752.203372][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3844'. [ 752.237677][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3844'. [ 752.267278][T19383] netlink: 33 bytes leftover after parsing attributes in process `syz.9.3844'. [ 752.293140][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3844'. [ 752.328210][T19383] netlink: 33 bytes leftover after parsing attributes in process `syz.9.3844'. [ 752.534848][T19389] /dev/rnullb0: Can't open blockdev [ 752.803147][T19392] ufs: You didn't specify the type of your ufs filesystem [ 752.803147][T19392] [ 752.803147][T19392] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 752.803147][T19392] [ 752.803147][T19392] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 752.844863][T19392] ufs: ufs_fill_super(): bad magic number [ 753.075355][ T9065] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 753.214406][ T9065] usb 9-1: device descriptor read/64, error -71 [ 753.474355][ T9065] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 753.654455][ T9065] usb 9-1: device descriptor read/64, error -71 [ 753.784477][ T9065] usb usb9-port1: attempt power cycle [ 754.035578][T19424] /dev/rnullb0: Can't open blockdev [ 754.041398][T19424] /dev/rnullb0: Can't open blockdev [ 754.065628][T19424] /dev/rnullb0: Can't open blockdev [ 754.072621][T19424] /dev/rnullb0: Can't open blockdev [ 754.081688][T19424] /dev/rnullb0: Can't open blockdev [ 754.097187][T19424] /dev/rnullb0: Can't open blockdev [ 754.120943][T19424] /dev/rnullb0: Can't open blockdev [ 754.137345][T19424] /dev/rnullb0: Can't open blockdev [ 754.143123][T19424] /dev/rnullb0: Can't open blockdev [ 754.155936][ T9065] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 754.166645][T19424] /dev/rnullb0: Can't open blockdev [ 754.172390][T19424] /dev/rnullb0: Can't open blockdev [ 754.189127][ T9065] usb 9-1: device descriptor read/8, error -71 [ 754.205387][T19424] /dev/rnullb0: Can't open blockdev [ 754.211203][T19424] /dev/rnullb0: Can't open blockdev [ 754.228698][T19424] /dev/rnullb0: Can't open blockdev [ 754.238782][T19424] /dev/rnullb0: Can't open blockdev [ 754.248913][T19424] /dev/rnullb0: Can't open blockdev [ 754.256311][T19424] /dev/rnullb0: Can't open blockdev [ 754.265160][T19424] /dev/rnullb0: Can't open blockdev [ 754.270916][T19424] /dev/rnullb0: Can't open blockdev [ 754.285879][T19424] /dev/rnullb0: Can't open blockdev [ 754.291721][T19424] /dev/rnullb0: Can't open blockdev [ 754.301564][T19424] /dev/rnullb0: Can't open blockdev [ 754.316406][T19424] /dev/rnullb0: Can't open blockdev [ 754.328206][T19424] /dev/rnullb0: Can't open blockdev [ 754.345571][T19424] /dev/rnullb0: Can't open blockdev [ 754.355818][T19424] /dev/rnullb0: Can't open blockdev [ 754.364577][T19424] /dev/rnullb0: Can't open blockdev [ 754.377148][T19424] /dev/rnullb0: Can't open blockdev [ 754.387438][T19424] /dev/rnullb0: Can't open blockdev [ 754.393318][T19424] /dev/rnullb0: Can't open blockdev [ 754.409235][ T5951] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 754.425686][T19424] /dev/rnullb0: Can't open blockdev [ 754.438714][ T9065] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 754.451067][T19424] /dev/rnullb0: Can't open blockdev [ 754.464974][T19424] /dev/rnullb0: Can't open blockdev [ 754.476200][T19424] /dev/rnullb0: Can't open blockdev [ 754.485080][ T9065] usb 9-1: device descriptor read/8, error -71 [ 754.491914][T19424] /dev/rnullb0: Can't open blockdev [ 754.502295][T19424] /dev/rnullb0: Can't open blockdev [ 754.512397][T19424] /dev/rnullb0: Can't open blockdev [ 754.522528][T19424] /dev/rnullb0: Can't open blockdev [ 754.532597][T19424] /dev/rnullb0: Can't open blockdev [ 754.540720][T19424] /dev/rnullb0: Can't open blockdev [ 754.554518][ T5951] usb 10-1: device descriptor read/64, error -71 [ 754.561580][T19424] /dev/rnullb0: Can't open blockdev [ 754.571668][T19424] /dev/rnullb0: Can't open blockdev [ 754.577676][T19424] /dev/rnullb0: Can't open blockdev [ 754.585165][T19424] /dev/rnullb0: Can't open blockdev [ 754.591185][T19424] /dev/rnullb0: Can't open blockdev [ 754.606218][ T9065] usb usb9-port1: unable to enumerate USB device [ 754.614494][T19424] /dev/rnullb0: Can't open blockdev [ 754.621235][T19424] /dev/rnullb0: Can't open blockdev [ 754.627623][T19424] /dev/rnullb0: Can't open blockdev [ 754.633564][T19424] /dev/rnullb0: Can't open blockdev [ 754.639675][T19424] /dev/rnullb0: Can't open blockdev [ 754.645797][T19424] /dev/rnullb0: Can't open blockdev [ 754.651556][T19424] /dev/rnullb0: Can't open blockdev [ 754.660112][T19424] /dev/rnullb0: Can't open blockdev [ 754.673040][T19424] /dev/rnullb0: Can't open blockdev [ 754.680350][T19424] /dev/rnullb0: Can't open blockdev [ 754.686585][T19424] /dev/rnullb0: Can't open blockdev [ 754.692449][T19424] /dev/rnullb0: Can't open blockdev [ 754.698522][T19424] /dev/rnullb0: Can't open blockdev [ 754.715049][T19424] /dev/rnullb0: Can't open blockdev [ 754.720800][T19424] /dev/rnullb0: Can't open blockdev [ 754.745305][T19424] /dev/rnullb0: Can't open blockdev [ 754.756740][T19424] /dev/rnullb0: Can't open blockdev [ 754.772679][T19424] /dev/rnullb0: Can't open blockdev [ 754.784853][T19424] /dev/rnullb0: Can't open blockdev [ 754.790695][T19424] /dev/rnullb0: Can't open blockdev [ 754.805543][ T5951] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 754.954445][ T5951] usb 10-1: device descriptor read/64, error -71 [ 755.078092][ T5951] usb usb10-port1: attempt power cycle [ 755.434371][ T5951] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 755.466156][ T5951] usb 10-1: device descriptor read/8, error -71 [ 755.704425][ T5951] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 755.738792][ T5951] usb 10-1: device descriptor read/8, error -71 [ 755.854855][ T5951] usb usb10-port1: unable to enumerate USB device [ 755.887775][T19460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.903743][T19460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.124405][ T5897] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 756.274325][ T5897] usb 9-1: Using ep0 maxpacket: 16 [ 756.282620][ T5897] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 756.294503][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.312765][ T5897] usb 9-1: Product: syz [ 756.317476][ T5897] usb 9-1: Manufacturer: syz [ 756.322108][ T5897] usb 9-1: SerialNumber: syz [ 756.336587][ T5897] usb 9-1: config 0 descriptor?? [ 756.346213][ T5897] visor 9-1:0.0: Sony Clie 3.5 converter detected [ 756.546624][ T5897] usb 9-1: clie_3_5_startup: get config number bad return length: 0 [ 756.556855][ T5897] visor 9-1:0.0: probe with driver visor failed with error -5 [ 756.759193][ T5897] usb 9-1: USB disconnect, device number 23 [ 757.339618][T19475] /dev/rnullb0: Can't open blockdev [ 757.394348][T18500] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 757.544423][T18500] usb 10-1: Using ep0 maxpacket: 8 [ 757.551443][T18500] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 757.560217][T18500] usb 10-1: config 0 has no interface number 0 [ 757.572124][T18500] usb 10-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 757.597645][T18500] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 757.617676][T18500] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 757.637644][T18500] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 757.653587][T18500] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.671107][T18500] usb 10-1: config 0 descriptor?? [ 757.681439][T19471] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 757.691839][T18500] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 757.904399][T19471] sctp: [Deprecated]: syz.9.3858 (pid 19471) Use of int in maxseg socket option. [ 757.904399][T19471] Use struct sctp_assoc_value instead [ 757.928980][T19471] 9pnet_fd: Insufficient options for proto=fd [ 757.981655][ T6361] usb 10-1: USB disconnect, device number 15 [ 758.069324][T19480] /dev/rnullb0: Can't open blockdev [ 758.576208][T19497] fuseblk: Bad value for 'group_id' [ 758.581473][T19497] fuseblk: Bad value for 'group_id' [ 758.601775][T19497] /dev/rnullb0: Can't open blockdev [ 758.644399][ T6361] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 758.683747][T19501] syzkaller1: entered promiscuous mode [ 758.691283][T19501] syzkaller1: entered allmulticast mode [ 758.735013][T19501] sp0: Synchronizing with TNC [ 758.784373][ T6361] usb 9-1: device descriptor read/64, error -71 [ 759.024394][ T6361] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 759.037891][T19509] ieee802154 phy0 wpan0: encryption failed: -90 [ 759.048061][T19509] /dev/rnullb0: Can't open blockdev [ 759.164366][ T6361] usb 9-1: device descriptor read/64, error -71 [ 759.284679][ T6361] usb usb9-port1: attempt power cycle [ 759.520598][T19499] [U] [ 759.638613][ T6361] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 759.679521][ T6361] usb 9-1: device descriptor read/8, error -71 [ 759.931458][ T6361] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 759.974953][ T6361] usb 9-1: device descriptor read/8, error -71 [ 760.095030][ T6361] usb usb9-port1: unable to enumerate USB device [ 761.259253][T19520] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 761.294836][T19520] hpfs: hpfs_map_sector(): read error [ 761.395203][T19522] fuse: Unknown parameter 'rootmodt' [ 761.466112][T19525] ieee802154 phy0 wpan0: encryption failed: -22 [ 761.727449][T18500] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 761.884356][T18500] usb 9-1: device descriptor read/64, error -71 [ 762.148342][T18500] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 762.394358][T18500] usb 9-1: device descriptor read/64, error -71 [ 762.514963][T18500] usb usb9-port1: attempt power cycle [ 762.682027][T19541] /dev/rnullb0: Can't open blockdev [ 762.783507][T18950] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 762.805610][T18950] CPU: 0 UID: 0 PID: 18950 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 762.805640][T18950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 762.805652][T18950] Call Trace: [ 762.805660][T18950] [ 762.805669][T18950] dump_stack_lvl+0x189/0x250 [ 762.805703][T18950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.805730][T18950] ? __pfx__printk+0x10/0x10 [ 762.805759][T18950] ? rcu_is_watching+0x15/0xb0 [ 762.805782][T18950] dump_header+0xd3/0x480 [ 762.805800][T18950] oom_kill_process+0x387/0x920 [ 762.805823][T18950] out_of_memory+0xf09/0x12a0 [ 762.805846][T18950] ? mem_cgroup_iter+0x3b/0x460 [ 762.805868][T18950] ? __pfx_out_of_memory+0x10/0x10 [ 762.805892][T18950] mem_cgroup_out_of_memory+0x145/0x240 [ 762.805913][T18950] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 762.805938][T18950] ? _raw_spin_unlock+0x28/0x50 [ 762.805959][T18950] ? memcg1_oom_prepare+0x37f/0x450 [ 762.805984][T18950] try_charge_memcg+0xdff/0x1290 [ 762.806008][T18950] ? rcu_is_watching+0x15/0xb0 [ 762.806033][T18950] ? __pfx_try_charge_memcg+0x10/0x10 [ 762.806070][T18950] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 762.806091][T18950] ? xa_load+0x60/0x210 [ 762.806117][T18950] ? rcu_is_watching+0x15/0xb0 [ 762.806139][T18950] ? rcu_is_watching+0x15/0xb0 [ 762.806159][T18950] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 762.806187][T18950] charge_memcg+0x9f/0x180 [ 762.806213][T18950] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 762.806240][T18950] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 762.806269][T18950] __read_swap_cache_async+0x28c/0x510 [ 762.806297][T18950] swap_cluster_readahead+0x305/0x5f0 [ 762.806322][T18950] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 762.806348][T18950] ? rcu_is_watching+0x15/0xb0 [ 762.806368][T18950] ? filemap_get_entry+0xad/0x2f0 [ 762.806390][T18950] ? get_vma_policy+0x27c/0x3c0 [ 762.806418][T18950] swapin_readahead+0x17d/0xb50 [ 762.806439][T18950] ? __pfx_filemap_get_entry+0x10/0x10 [ 762.806463][T18950] ? get_swap_device_info+0x1c/0x2b0 [ 762.806485][T18950] ? rcu_is_watching+0x15/0xb0 [ 762.806504][T18950] ? __pfx_swapin_readahead+0x10/0x10 [ 762.806528][T18950] ? __filemap_get_folio+0x9a6/0xaf0 [ 762.806552][T18950] ? swap_cache_get_folio+0xae/0x3b0 [ 762.806576][T18950] do_swap_page+0x525/0x5ac0 [ 762.806601][T18950] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 762.806629][T18950] ? ___pte_offset_map+0x29/0x250 [ 762.806656][T18950] ? lock_acquire+0x5f/0x360 [ 762.806673][T18950] ? do_swap_page+0x184/0x5ac0 [ 762.806696][T18950] ? __pfx_do_swap_page+0x10/0x10 [ 762.806720][T18950] ? __pfx_default_wake_function+0x10/0x10 [ 762.806739][T18950] ? ___pte_offset_map+0x45/0x250 [ 762.806763][T18950] ? ___pte_offset_map+0x1cf/0x250 [ 762.806789][T18950] ? pte_offset_map_rw_nolock+0xea/0x160 [ 762.806815][T18950] __handle_mm_fault+0xe55/0x5400 [ 762.806848][T18950] ? __pfx___handle_mm_fault+0x10/0x10 [ 762.806874][T18950] ? rcu_is_watching+0x15/0xb0 [ 762.806899][T18950] ? lock_vma_under_rcu+0x3cb/0x450 [ 762.806917][T18950] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 762.806938][T18950] handle_mm_fault+0x40a/0x8e0 [ 762.806968][T18950] do_user_addr_fault+0xa81/0x1390 [ 762.806991][T18950] ? rcu_is_watching+0x15/0xb0 [ 762.807012][T18950] ? trace_page_fault_user+0x84/0x1e0 [ 762.807032][T18950] exc_page_fault+0x82/0x100 [ 762.807064][T18950] asm_exc_page_fault+0x26/0x30 [ 762.807081][T18950] RIP: 0033:0x7f51169c14a8 [ 762.807099][T18950] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 762.807116][T18950] RSP: 002b:00007fffbf3cb1e0 EFLAGS: 00010293 [ 762.807135][T18950] RAX: 0000000000000000 RBX: 0000000000000056 RCX: 00007f51169c14a5 [ 762.807148][T18950] RDX: 00007fffbf3cb220 RSI: 0000000000000000 RDI: 0000000000000000 [ 762.807160][T18950] RBP: 00007fffbf3cb28c R08: 0000000000000000 R09: 0000000000000000 [ 762.807172][T18950] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 762.807185][T18950] R13: 00000000000927c0 R14: 00000000000b98ac R15: 00007fffbf3cb2e0 [ 762.807206][T18950] [ 762.807214][T18950] memory: usage 307200kB, limit 307200kB, failcnt 12979 [ 762.894147][T18500] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 763.005680][T18950] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 763.136163][T18500] usb 9-1: device descriptor read/8, error -71 [ 763.307085][T18950] kmem: usage 1680kB, limit 9007199254740988kB, failcnt 0 [ 763.332466][T18950] Memory cgroup stats for /syz9: [ 763.332618][T18950] cache 312852480 [ 763.347352][T18950] rss 0 [ 763.350164][T18950] rss_huge 0 [ 763.363392][T18950] shmem 312852480 [ 763.374389][T18950] mapped_file 0 [ 763.388134][T18950] dirty 0 [ 763.398246][T18950] writeback 0 [ 763.401562][T18950] workingset_refault_anon 0 [ 763.425491][T18950] workingset_refault_file 0 [ 763.444448][T18950] swap 200704 [ 763.447791][T18950] swapcached 0 [ 763.464506][T18950] pgpgin 86344 [ 763.467925][T18950] pgpgout 9964 [ 763.471305][T18950] pgfault 9749 [ 763.494737][T18950] pgmajfault 33 [ 763.498298][T18950] inactive_anon 5332992 [ 763.524362][T18950] active_anon 107159552 [ 763.532109][T18950] inactive_file 0 [ 763.548900][T18950] active_file 0 [ 763.552406][T18950] unevictable 200359936 [ 763.579267][T18950] hierarchical_memory_limit 314572800 [ 763.594341][T18950] hierarchical_memsw_limit 9223372036854771712 [ 763.614332][T18950] total_cache 312852480 [ 763.631213][T18950] total_rss 0 [ 763.641209][T18950] total_rss_huge 0 [ 763.655340][T18950] total_shmem 312852480 [ 763.655370][T18500] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 763.659530][T18950] total_mapped_file 0 [ 763.695657][T18500] usb 9-1: device descriptor read/8, error -71 [ 763.697985][T18950] total_dirty 0 [ 763.721669][T18950] total_writeback 0 [ 763.736273][T18950] total_workingset_refault_anon 0 [ 763.741416][T18950] total_workingset_refault_file 0 [ 763.754066][T18950] total_swap 200704 [ 763.761600][T18950] total_swapcached 0 [ 763.766126][T18950] total_pgpgin 86344 [ 763.770103][T18950] total_pgpgout 9964 [ 763.774002][T18950] total_pgfault 9749 [ 763.778641][T18950] total_pgmajfault 33 [ 763.782703][T18950] total_inactive_anon 5332992 [ 763.788549][T18950] total_active_anon 107159552 [ 763.793317][T18950] total_inactive_file 0 [ 763.798362][T18950] total_active_file 0 [ 763.802356][T18950] total_unevictable 200359936 [ 763.812413][T18950] anon_cost 0 [ 763.815574][T18500] usb usb9-port1: unable to enumerate USB device [ 763.819420][T18950] file_cost 0 [ 763.828264][T18950] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3873,pid=19514,uid=0 [ 763.844043][T18950] Memory cgroup out of memory: Killed process 19514 (syz.9.3873) total-vm:102004kB, anon-rss:1076kB, file-rss:23208kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 764.814384][ T6360] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 764.976169][ T6360] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 764.994445][ T6360] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.015491][ T6360] usb 9-1: config 0 has no interface number 0 [ 765.024019][ T6360] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 765.043640][ T6360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.056195][ T6360] usb 9-1: Product: syz [ 765.060490][ T6360] usb 9-1: Manufacturer: syz [ 765.074544][ T6360] usb 9-1: SerialNumber: syz [ 765.089996][ T6360] usb 9-1: config 0 descriptor?? [ 765.100887][ T6360] hub 9-1:0.31: bad descriptor, ignoring hub [ 765.114325][ T6360] hub 9-1:0.31: probe with driver hub failed with error -5 [ 765.132988][ T6360] usb 9-1: Found UVC 0.04 device syz (046d:08c3) [ 765.144357][ T6360] uvcvideo 9-1:0.31: Entity type for entity Output 6 was not initialized! [ 765.146488][T19580] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.164016][ T6360] usb 9-1: Failed to create links for entity 6 [ 765.173799][ T6360] usb 9-1: Failed to register entities (-22). [ 765.207976][T19580] I/O error, dev loop6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.257808][T19580] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 765.295784][T19580] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.349665][T19580] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 765.374390][T19580] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 765.402465][T19580] UDF-fs: Scanning with blocksize 512 failed [ 765.413116][T19580] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.414973][ T6360] usb 9-1: USB disconnect, device number 32 [ 765.436490][T19580] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.475623][T19580] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 765.495369][T19580] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.517197][T19580] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 765.540349][T19580] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 765.574011][T19580] UDF-fs: Scanning with blocksize 1024 failed [ 765.585358][T19580] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.635733][T19580] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.665445][T19580] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 765.704456][T19580] I/O error, dev loop6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 765.725425][T19580] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 765.750122][T19580] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 765.769428][T19580] UDF-fs: Scanning with blocksize 2048 failed [ 765.784156][T19580] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 765.824794][T19580] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 765.865718][T19582] /dev/rnullb0: Can't open blockdev [ 765.873160][T19580] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 765.894446][T19580] UDF-fs: Scanning with blocksize 4096 failed [ 765.934701][T19580] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 766.145895][ T6360] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 766.304330][ T6360] usb 9-1: Using ep0 maxpacket: 16 [ 766.336988][ T6360] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 766.358813][ T6360] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 766.374457][ T6360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.402797][ T6360] usb 9-1: Product: syz [ 766.408062][ T6360] usb 9-1: Manufacturer: syz [ 766.412695][ T6360] usb 9-1: SerialNumber: syz [ 766.434927][ T6360] usb 9-1: config 0 descriptor?? [ 766.490722][T19606] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3900'. [ 766.497676][T19601] virt_wifi0 speed is unknown, defaulting to 1000 [ 766.656241][T19586] batadv_slave_1: entered promiscuous mode [ 766.664528][T19586] batadv_slave_1: left promiscuous mode [ 766.685072][T19586] /dev/rnullb0: Can't open blockdev [ 766.696996][ T24] usb 9-1: USB disconnect, device number 33 [ 766.774450][ T5897] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 766.926691][ T5897] usb 10-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 766.937461][ T5897] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 766.956723][ T30] audit: type=1326 audit(1756266500.045:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19612 comm="syz.6.3902" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb26118ebe9 code=0x0 [ 766.979488][ T5897] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 767.002376][ T5897] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.017681][ T5897] usb 10-1: config 0 descriptor?? [ 767.227599][T19600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.237976][T19600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.249308][T19600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.260017][T19600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.272858][T19600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.282079][T19600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.291672][T19600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.300457][T19600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.504375][ T6360] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 767.516427][T19601] /dev/rnullb0: Can't open blockdev [ 767.522325][T19600] /dev/rnullb0: Can't open blockdev [ 767.533739][ T5897] usb 10-1: string descriptor 0 read error: -71 [ 767.542594][ T5897] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 767.551714][ T5897] usb 10-1: USB disconnect, device number 16 [ 767.666560][ T6360] usb 9-1: config 5 has an invalid interface number: 39 but max is 3 [ 767.679118][ T6360] usb 9-1: config 5 has an invalid interface number: 23 but max is 3 [ 767.716541][ T6360] usb 9-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 767.734453][ T6360] usb 9-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 767.767739][ T6360] usb 9-1: config 5 has no interface number 0 [ 767.773973][ T6360] usb 9-1: config 5 has no interface number 1 [ 767.780796][ T6360] usb 9-1: config 5 interface 39 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 767.795238][ T6360] usb 9-1: config 5 interface 39 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 767.806573][ T6360] usb 9-1: config 5 interface 39 altsetting 7 endpoint 0x5 has an invalid bInterval 37, changing to 9 [ 767.819445][ T6360] usb 9-1: config 5 interface 39 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 767.830618][ T6360] usb 9-1: config 5 interface 39 altsetting 7 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 767.842033][ T6360] usb 9-1: config 5 interface 39 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 767.853420][ T6360] usb 9-1: config 5 interface 39 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 767.874619][ T6360] usb 9-1: config 5 interface 39 altsetting 7 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 767.886562][ T6360] usb 9-1: config 5 interface 23 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 767.900264][ T6360] usb 9-1: config 5 interface 39 has no altsetting 0 [ 767.907282][ T6360] usb 9-1: config 5 interface 23 has no altsetting 0 [ 767.916163][ T6360] usb 9-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=fb.04 [ 767.926901][ T6360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.940800][ T6360] usb 9-1: Product: ﵷ㒉뱚ྎ㦾龽쟎⌞뱘裓밑፲ド曰詸랚哹둇䫮䊀煛焮靸댃갡᫏긤㤘䣽ᒸ㎚ਘಃ嘺袿릉ԭ⩿阡꿾臭︇╰棅庚໚巋ᨏꇇ쥖堎辷ꈚ澓字乵䡺২藦粋㎂㎓뫟瘈䄶Ũ檃閽闌ꂂ忽┌ᝁ웘Ⱙ㆙ߘ鿋빙듪슷ቍ歡矌몄᳙ﺶ왜튓饃㛐ݵ饯勂蜽ꆖ⭭퇪躊ꮅⒶ䤮簈ی [ 767.965480][T19624] /dev/rnullb0: Can't open blockdev [ 767.980136][ T6360] usb 9-1: Manufacturer: ѕ [ 767.980162][ T6360] usb 9-1: SerialNumber: 㱰 [ 768.196799][T19617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.205857][T19617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.215381][T19617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.235374][T19617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.256623][T19617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.274735][T19617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.304529][T19617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.326452][T19617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.342474][T19617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.362593][T19617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.391150][ T6360] vmk80xx 9-1:5.39: driver 'vmk80xx' failed to auto-configure device. [ 768.402682][T19626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.408253][ T6360] usbhid 9-1:5.23: couldn't find an input interrupt endpoint [ 768.420656][T19626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.421120][ T6360] vmk80xx 9-1:5.23: driver 'vmk80xx' failed to auto-configure device. [ 768.443331][T19626] batadv_slave_1: entered promiscuous mode [ 768.450158][ T6360] usb 9-1: USB disconnect, device number 34 [ 768.483070][T19625] batadv_slave_1: left promiscuous mode [ 768.564339][ T6361] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 768.715931][ T6361] usb 10-1: unable to get BOS descriptor or descriptor too short [ 768.724917][ T6361] usb 10-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 768.739366][ T6361] usb 10-1: string descriptor 0 read error: -22 [ 768.746039][ T6361] usb 10-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 768.764319][ T6361] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.904401][ T6361] usb 10-1: reset high-speed USB device number 17 using dummy_hcd [ 769.119744][T19642] /dev/rnullb0: Can't open blockdev [ 769.399068][T19659] /dev/rnullb0: Can't open blockdev [ 769.486757][T19662] /dev/rnullb0: Can't open blockdev [ 769.549827][T19668] /dev/rnullb0: Can't open blockdev [ 769.604437][ T6361] usb 10-1: device descriptor read/64, error -71 [ 769.721680][T19664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.741933][T19664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.762996][T19664] batadv_slave_1: entered promiscuous mode [ 769.775017][T19663] batadv_slave_1: left promiscuous mode [ 769.844339][ T24] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 769.854380][ T6361] usb 10-1: reset high-speed USB device number 17 using dummy_hcd [ 769.862846][ T6361] usb 10-1: device reset changed ep0 maxpacket size! [ 769.879342][ T6361] usb 10-1: USB disconnect, device number 17 [ 769.998481][ T24] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 770.010374][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.024349][ T6361] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 770.027138][ T24] usb 9-1: Product: syz [ 770.044320][ T24] usb 9-1: Manufacturer: syz [ 770.048941][ T24] usb 9-1: SerialNumber: syz [ 770.066315][ T24] r8152-cfgselector 9-1: Unknown version 0x0000 [ 770.073116][ T24] r8152-cfgselector 9-1: config 0 descriptor?? [ 770.184361][ T6361] usb 10-1: Using ep0 maxpacket: 16 [ 770.201439][ T6361] usb 10-1: unable to get BOS descriptor or descriptor too short [ 770.216155][ T6361] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 770.237735][ T6361] usb 10-1: can't read configurations, error -71 [ 770.631485][T19681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.651111][T19681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.691943][T19681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.712298][T19681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.957379][T19688] /dev/rnullb0: Can't open blockdev [ 771.076372][T19693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.096993][T19693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.294657][ T6361] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 771.434392][ T6361] usb 10-1: device descriptor read/64, error -71 [ 771.554665][ T6361] usb usb10-port1: attempt power cycle [ 771.703850][T19699] fuse: Bad value for 'fd' [ 771.914383][ T6361] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 771.954928][ T6361] usb 10-1: device descriptor read/8, error -71 [ 772.163004][T19701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.195585][ T6361] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 772.195811][T19701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.215214][ T6361] usb 10-1: device descriptor read/8, error -71 [ 772.265711][T19701] batadv_slave_1: entered promiscuous mode [ 772.286144][T19700] batadv_slave_1: left promiscuous mode [ 772.326425][ T6361] usb usb10-port1: unable to enumerate USB device [ 772.931785][T19704] /dev/rnullb0: Can't open blockdev [ 774.128993][ T30] audit: type=1326 audit(1756266507.215:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19718 comm="syz.9.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511698ebe9 code=0x7ffc0000 [ 774.156655][T19721] 9pnet_fd: p9_fd_create_tcp (19721): problem connecting socket to 127.0.0.1 [ 774.214551][ T30] audit: type=1326 audit(1756266507.215:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19718 comm="syz.9.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511698ebe9 code=0x7ffc0000 [ 774.263509][ T30] audit: type=1326 audit(1756266507.215:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19718 comm="syz.9.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f511698ebe9 code=0x7ffc0000 [ 774.307699][ T30] audit: type=1326 audit(1756266507.215:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19718 comm="syz.9.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511698ebe9 code=0x7ffc0000 [ 774.344999][ T30] audit: type=1326 audit(1756266507.215:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19718 comm="syz.9.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511698ebe9 code=0x7ffc0000 [ 774.378267][ T30] audit: type=1326 audit(1756266507.215:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19718 comm="syz.9.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f511698ebe9 code=0x7ffc0000 [ 774.431115][ T30] audit: type=1326 audit(1756266507.215:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19718 comm="syz.9.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511698ebe9 code=0x7ffc0000 [ 774.498821][ T30] audit: type=1326 audit(1756266507.215:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19718 comm="syz.9.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511698ebe9 code=0x7ffc0000 [ 774.627372][ T30] audit: type=1326 audit(1756266507.245:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19718 comm="syz.9.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f511698ebe9 code=0x7ffc0000 [ 774.676853][ T30] audit: type=1326 audit(1756266507.245:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19718 comm="syz.9.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511698ebe9 code=0x7ffc0000 [ 775.223284][T19732] program syz.6.3940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 775.334370][ T5897] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 775.357315][T19739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.384791][T19739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.486020][ T5897] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.499227][ T5897] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 775.513858][ T5897] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 775.533234][ T5897] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.558629][ T5897] usb 10-1: config 0 descriptor?? [ 775.566116][ T5897] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 775.586124][T19741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.603636][T19741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.473158][T19749] batadv_slave_1: entered promiscuous mode [ 776.952905][T19753] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3947'. [ 777.898680][T19728] batadv_slave_1: left promiscuous mode [ 777.948389][ T5951] usb 10-1: USB disconnect, device number 22 [ 777.992344][T19759] /dev/rnullb0: Can't open blockdev [ 779.598805][T19787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.629215][T19787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.681280][T19787] batadv_slave_1: entered promiscuous mode [ 779.725194][T19786] batadv_slave_1: left promiscuous mode [ 780.375777][ T5897] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 780.569419][ T5897] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 780.584355][ T5897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.602683][ T5897] usb 10-1: Product: syz [ 780.607188][ T5897] usb 10-1: Manufacturer: syz [ 780.614633][ T5897] usb 10-1: SerialNumber: syz [ 780.626813][ T5897] usb 10-1: config 0 descriptor?? [ 780.644775][ T5897] gspca_main: sq930x-2.14.0 probing 2770:930c [ 780.837356][T19798] tmpfs: Bad value for 'mpol' [ 781.437937][ T5897] gspca_sq930x: ucbus_write failed -110 [ 782.704324][ T5897] gspca_sq930x: Unknown sensor [ 782.709218][ T5897] sq930x 10-1:0.0: probe with driver sq930x failed with error -22 [ 783.081933][ T5897] usb 10-1: USB disconnect, device number 23 [ 783.509655][T19830] /dev/rnullb0: Can't open blockdev [ 783.764473][ T5951] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 783.874521][T19842] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 783.881104][T19842] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 783.902520][T19842] vhci_hcd vhci_hcd.0: Device attached [ 783.927038][T19850] vhci_hcd: connection closed [ 783.927245][ T7661] vhci_hcd: stop threads [ 783.936245][ T5951] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.936324][ T5951] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 783.964381][ T5951] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 783.973792][ T5951] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.987322][ T7661] vhci_hcd: release socket [ 783.991788][ T7661] vhci_hcd: disconnect device [ 783.999487][ T5951] usb 10-1: config 0 descriptor?? [ 784.008092][ T5951] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 784.195850][T19857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.247427][T19857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.282280][T19857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.314571][T19857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.550250][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 784.558019][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 784.566856][ T5869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 784.577631][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 784.589727][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 784.651621][T19861] virt_wifi0 speed is unknown, defaulting to 1000 [ 784.921955][T19867] batadv_slave_1: entered promiscuous mode [ 784.948338][T19861] chnl_net:caif_netlink_parms(): no params data found [ 785.102075][T19861] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.120203][T19861] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.136268][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 785.136285][ T30] audit: type=1326 audit(1756266518.225:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.6.3980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb26118ebe9 code=0x0 [ 785.180119][T19861] bridge_slave_0: entered allmulticast mode [ 785.191779][T19861] bridge_slave_0: entered promiscuous mode [ 785.193637][T19861] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.193711][T19861] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.193830][T19861] bridge_slave_1: entered allmulticast mode [ 785.197062][T19861] bridge_slave_1: entered promiscuous mode [ 785.277037][T19861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.299315][T19861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.326101][ T60] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.481622][T19861] team0: Port device team_slave_0 added [ 785.497113][T19861] team0: Port device team_slave_1 added [ 785.513511][ T60] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.571073][ T60] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.591293][T19861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.603129][T19861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.642279][T19861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.695863][T19861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.706205][T19861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.749648][T19861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.817322][ T60] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.889923][T19861] hsr_slave_0: entered promiscuous mode [ 785.901240][T19861] hsr_slave_1: entered promiscuous mode [ 785.912282][T19861] debugfs: 'hsr0' already exists in 'hsr' [ 785.923906][T19861] Cannot create hsr debugfs directory [ 786.111876][ T60] bridge_slave_1: left allmulticast mode [ 786.122338][ T60] bridge_slave_1: left promiscuous mode [ 786.140603][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.156888][ T60] bridge_slave_0: left allmulticast mode [ 786.168048][ T60] bridge_slave_0: left promiscuous mode [ 786.176682][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.376086][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.400016][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.427958][T19890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.454683][T19890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.488390][ T60] bond0 (unregistering): Released all slaves [ 786.526884][T19821] batadv_slave_1: left promiscuous mode [ 786.542472][ T24] usb 10-1: USB disconnect, device number 24 [ 786.614502][ T5874] Bluetooth: hci3: command tx timeout [ 786.711048][T19897] /dev/rnullb0: Can't open blockdev [ 786.789908][ T60] hsr_slave_0: left promiscuous mode [ 786.811138][ T60] hsr_slave_1: left promiscuous mode [ 786.827907][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.855589][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.876098][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.897968][ T60] veth1_macvtap: left promiscuous mode [ 786.909153][T19906] overlay: Unknown parameter 'permit_directio' [ 786.916058][ T60] veth0_macvtap: left promiscuous mode [ 786.927001][ T60] veth1_vlan: left promiscuous mode [ 787.110105][T19912] kvm: emulating exchange as write [ 787.211972][T19915] /dev/rnullb0: Can't open blockdev [ 787.211984][ T60] team0 (unregistering): Port device team_slave_1 removed [ 787.281255][ T60] team0 (unregistering): Port device team_slave_0 removed [ 787.774488][ T24] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 787.950170][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.980462][ T24] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 788.003750][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.022782][ T24] usb 10-1: config 0 descriptor?? [ 788.038718][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 788.441818][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 788.459739][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 788.473143][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 788.489137][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 788.511823][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 788.531955][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 788.548219][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 788.647596][T19861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 788.668367][T19861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 788.686133][T19861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 788.696312][ T5874] Bluetooth: hci3: command tx timeout [ 788.709218][T19861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 788.794427][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 788.804678][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 788.813113][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 788.824991][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 788.831840][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 788.839200][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 788.849158][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 788.859468][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 788.875375][ T24] pwc: Registered as video103. [ 788.891699][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input48 [ 788.933879][ T24] usb 10-1: USB disconnect, device number 25 [ 788.952277][T19960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.969470][T19861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.019125][T19861] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.035814][T19960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.052955][ T7661] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.060160][ T7661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.088185][T19960] batadv_slave_1: entered promiscuous mode [ 789.101716][ T7661] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.109238][ T7661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.169603][T19959] batadv_slave_1: left promiscuous mode [ 789.671037][T19861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.671892][T19999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.741528][T19999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.743559][T19861] veth0_vlan: entered promiscuous mode [ 789.794070][T19861] veth1_vlan: entered promiscuous mode [ 789.845838][T19861] veth0_macvtap: entered promiscuous mode [ 789.863626][T19861] veth1_macvtap: entered promiscuous mode [ 789.905267][T19861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.950425][T19861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.976003][ T7657] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.988128][T20008] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4000'. [ 789.997996][ T5897] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 790.004746][ T7657] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.019286][ T7657] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.044048][ T7657] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.127568][ T7657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.136027][ T5897] usb 10-1: device descriptor read/64, error -71 [ 790.156569][ T7657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.202718][ T7661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.223349][ T7661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.281989][T20017] /dev/rnullb0: Can't open blockdev [ 790.386442][ T5897] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 790.414543][ T30] audit: type=1800 audit(1756266523.485:114): pid=20026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4002" name="card4" dev="devtmpfs" ino=3924 res=0 errno=0 [ 790.527135][ T5897] usb 10-1: device descriptor read/64, error -71 [ 790.665933][ T5897] usb usb10-port1: attempt power cycle [ 790.782166][ T6361] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 790.790180][ T5874] Bluetooth: hci3: command tx timeout [ 790.967778][ T6361] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.985243][ T6361] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 791.001170][ T6361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.025487][ T6361] usb 2-1: config 0 descriptor?? [ 791.045768][ T5897] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 791.047062][ T6361] pwc: Askey VC010 type 2 USB webcam detected. [ 791.114773][ T5897] usb 10-1: device descriptor read/8, error -71 [ 791.292511][T20049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.307685][T20049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.319018][T20049] batadv_slave_1: entered promiscuous mode [ 791.326100][T20048] batadv_slave_1: left promiscuous mode [ 791.364879][ T5897] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 791.395226][ T5897] usb 10-1: device descriptor read/8, error -71 [ 791.457107][ T6361] pwc: recv_control_msg error -32 req 02 val 2b00 [ 791.464397][ T6361] pwc: recv_control_msg error -32 req 02 val 2700 [ 791.472929][ T6361] pwc: recv_control_msg error -32 req 02 val 2c00 [ 791.480532][ T6361] pwc: recv_control_msg error -32 req 04 val 1000 [ 791.491000][ T6361] pwc: recv_control_msg error -32 req 04 val 1300 [ 791.503948][ T6361] pwc: recv_control_msg error -32 req 04 val 1400 [ 791.511434][ T6361] pwc: recv_control_msg error -32 req 02 val 2000 [ 791.525744][ T5897] usb usb10-port1: unable to enumerate USB device [ 791.608029][T20072] FAULT_INJECTION: forcing a failure. [ 791.608029][T20072] name failslab, interval 1, probability 0, space 0, times 0 [ 791.646517][T20072] CPU: 1 UID: 0 PID: 20072 Comm: syz.6.4009 Not tainted syzkaller #0 PREEMPT(full) [ 791.646547][T20072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 791.646559][T20072] Call Trace: [ 791.646567][T20072] [ 791.646576][T20072] dump_stack_lvl+0x189/0x250 [ 791.646608][T20072] ? __pfx____ratelimit+0x10/0x10 [ 791.646631][T20072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 791.646657][T20072] ? __pfx__printk+0x10/0x10 [ 791.646681][T20072] ? percpu_ref_get_many+0x19/0x140 [ 791.646701][T20072] ? __pfx___might_resched+0x10/0x10 [ 791.646721][T20072] ? lock_acquire+0x5f/0x360 [ 791.646738][T20072] should_fail_ex+0x414/0x560 [ 791.646764][T20072] should_failslab+0xa8/0x100 [ 791.646791][T20072] kmem_cache_alloc_noprof+0x73/0x390 [ 791.646818][T20072] ? security_inode_alloc+0x39/0x330 [ 791.646845][T20072] security_inode_alloc+0x39/0x330 [ 791.646869][T20072] inode_init_always_gfp+0x9ed/0xdc0 [ 791.646892][T20072] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 791.646910][T20072] alloc_inode+0x82/0x1b0 [ 791.646930][T20072] new_inode+0x22/0x170 [ 791.646952][T20072] shmem_get_inode+0x346/0xe90 [ 791.646973][T20072] shmem_mknod+0x18c/0x3e0 [ 791.646996][T20072] shmem_mkdir+0x33/0x70 [ 791.647017][T20072] vfs_mkdir+0x306/0x510 [ 791.647035][T20072] ovl_do_mkdir+0x85/0xe0 [ 791.647059][T20072] ovl_create_real+0x1b5/0x410 [ 791.647083][T20072] ovl_create_or_link+0x7c2/0x1410 [ 791.647114][T20072] ? rcu_is_watching+0x15/0xb0 [ 791.647135][T20072] ? __pfx_ovl_create_or_link+0x10/0x10 [ 791.647163][T20072] ? rcu_is_watching+0x15/0xb0 [ 791.647184][T20072] ? rcu_is_watching+0x15/0xb0 [ 791.647202][T20072] ? from_vfsgid+0x72/0xa0 [ 791.647227][T20072] ? inode_init_owner+0x1ee/0x3a0 [ 791.647255][T20072] ovl_create_object+0x234/0x310 [ 791.647280][T20072] ? __pfx_ovl_create_object+0x10/0x10 [ 791.647303][T20072] ? apparmor_path_mkdir+0x1a7/0x220 [ 791.647320][T20072] ? make_vfsgid+0x49/0xa0 [ 791.647344][T20072] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 791.647371][T20072] ovl_mkdir+0x2b/0x40 [ 791.647394][T20072] vfs_mkdir+0x306/0x510 [ 791.647414][T20072] do_mkdirat+0x247/0x590 [ 791.647432][T20072] ? __pfx_do_mkdirat+0x10/0x10 [ 791.647450][T20072] ? getname_flags+0x1e5/0x540 [ 791.647472][T20072] __x64_sys_mkdir+0x6c/0x80 [ 791.647490][T20072] do_syscall_64+0xfa/0xfa0 [ 791.647515][T20072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.647533][T20072] ? clear_bhb_loop+0x60/0xb0 [ 791.647553][T20072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.647572][T20072] RIP: 0033:0x7fb26118ebe9 [ 791.647588][T20072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.647604][T20072] RSP: 002b:00007fb2620b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 791.647627][T20072] RAX: ffffffffffffffda RBX: 00007fb2613b5fa0 RCX: 00007fb26118ebe9 [ 791.647641][T20072] RDX: 0000000000000000 RSI: 0000000000000108 RDI: 0000200000000540 [ 791.647654][T20072] RBP: 00007fb2620b2090 R08: 0000000000000000 R09: 0000000000000000 [ 791.647667][T20072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 791.647679][T20072] R13: 00007fb2613b6038 R14: 00007fb2613b5fa0 R15: 00007ffd18001d88 [ 791.647699][T20072] [ 792.138654][ T6361] pwc: recv_control_msg error -71 req 04 val 1500 [ 792.173162][ T6361] pwc: recv_control_msg error -71 req 02 val 2500 [ 792.211141][ T6361] pwc: recv_control_msg error -71 req 02 val 2400 [ 792.270592][ T6361] pwc: recv_control_msg error -71 req 02 val 2600 [ 792.305630][ T6361] pwc: recv_control_msg error -71 req 02 val 2900 [ 792.346775][ T6361] pwc: recv_control_msg error -71 req 02 val 2800 [ 792.361433][ T6361] pwc: recv_control_msg error -71 req 04 val 1100 [ 792.391592][ T6361] pwc: recv_control_msg error -71 req 04 val 1200 [ 792.433136][T20087] cgroup2: Unknown parameter 'obj_user' [ 792.434576][ T6361] pwc: Registered as video103. [ 792.464058][ T6361] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input49 [ 792.465537][T20089] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4012'. [ 792.524666][ T6361] usb 2-1: USB disconnect, device number 40 [ 792.608581][T16257] udevd[16257]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 792.843004][T20108] /dev/rnullb0: Can't open blockdev [ 792.854764][ T5874] Bluetooth: hci3: command tx timeout [ 792.911578][T20112] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4017'. [ 792.935226][T20113] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4016'. [ 793.126178][T20119] FAULT_INJECTION: forcing a failure. [ 793.126178][T20119] name failslab, interval 1, probability 0, space 0, times 0 [ 793.190757][T20119] CPU: 0 UID: 0 PID: 20119 Comm: syz.6.4019 Not tainted syzkaller #0 PREEMPT(full) [ 793.190786][T20119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 793.190799][T20119] Call Trace: [ 793.190807][T20119] [ 793.190815][T20119] dump_stack_lvl+0x189/0x250 [ 793.190847][T20119] ? __pfx____ratelimit+0x10/0x10 [ 793.190869][T20119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 793.190894][T20119] ? __pfx__printk+0x10/0x10 [ 793.190917][T20119] ? percpu_ref_get_many+0x19/0x140 [ 793.190935][T20119] ? __pfx___might_resched+0x10/0x10 [ 793.190955][T20119] ? lock_acquire+0x5f/0x360 [ 793.190974][T20119] should_fail_ex+0x414/0x560 [ 793.191000][T20119] should_failslab+0xa8/0x100 [ 793.191027][T20119] kmem_cache_alloc_noprof+0x73/0x390 [ 793.191052][T20119] ? security_inode_alloc+0x39/0x330 [ 793.191078][T20119] security_inode_alloc+0x39/0x330 [ 793.191102][T20119] inode_init_always_gfp+0x9ed/0xdc0 [ 793.191125][T20119] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 793.191145][T20119] alloc_inode+0x82/0x1b0 [ 793.191165][T20119] new_inode+0x22/0x170 [ 793.191188][T20119] shmem_get_inode+0x346/0xe90 [ 793.191210][T20119] shmem_mknod+0x18c/0x3e0 [ 793.191232][T20119] shmem_mkdir+0x33/0x70 [ 793.191252][T20119] vfs_mkdir+0x306/0x510 [ 793.191272][T20119] ovl_do_mkdir+0x85/0xe0 [ 793.191297][T20119] ovl_create_real+0x1b5/0x410 [ 793.191323][T20119] ovl_create_or_link+0x7c2/0x1410 [ 793.191355][T20119] ? rcu_is_watching+0x15/0xb0 [ 793.191376][T20119] ? __pfx_ovl_create_or_link+0x10/0x10 [ 793.191406][T20119] ? rcu_is_watching+0x15/0xb0 [ 793.191428][T20119] ? rcu_is_watching+0x15/0xb0 [ 793.191447][T20119] ? from_vfsgid+0x72/0xa0 [ 793.191473][T20119] ? inode_init_owner+0x1ee/0x3a0 [ 793.191502][T20119] ovl_create_object+0x234/0x310 [ 793.191530][T20119] ? __pfx_ovl_create_object+0x10/0x10 [ 793.191556][T20119] ? apparmor_path_mkdir+0x1a7/0x220 [ 793.191575][T20119] ? make_vfsgid+0x49/0xa0 [ 793.191601][T20119] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 793.191628][T20119] ovl_mkdir+0x2b/0x40 [ 793.191653][T20119] vfs_mkdir+0x306/0x510 [ 793.191672][T20119] do_mkdirat+0x247/0x590 [ 793.191691][T20119] ? __pfx_do_mkdirat+0x10/0x10 [ 793.191711][T20119] ? getname_flags+0x1e5/0x540 [ 793.191735][T20119] __x64_sys_mkdir+0x6c/0x80 [ 793.191755][T20119] do_syscall_64+0xfa/0xfa0 [ 793.191786][T20119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.191805][T20119] ? clear_bhb_loop+0x60/0xb0 [ 793.191826][T20119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.191844][T20119] RIP: 0033:0x7fb26118ebe9 [ 793.191863][T20119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.191881][T20119] RSP: 002b:00007fb2620b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 793.191904][T20119] RAX: ffffffffffffffda RBX: 00007fb2613b5fa0 RCX: 00007fb26118ebe9 [ 793.191917][T20119] RDX: 0000000000000000 RSI: 0000000000000108 RDI: 0000200000000540 [ 793.191929][T20119] RBP: 00007fb2620b2090 R08: 0000000000000000 R09: 0000000000000000 [ 793.191940][T20119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 793.191950][T20119] R13: 00007fb2613b6038 R14: 00007fb2613b5fa0 R15: 00007ffd18001d88 [ 793.191969][T20119] [ 793.511026][ C0] vkms_vblank_simulate: vblank timer overrun [ 793.774340][ T6361] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 793.966555][ T6361] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.977402][ T6361] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 794.014346][ T6361] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 794.058664][T20142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.059328][ T6361] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.118261][ T6361] usb 10-1: config 0 descriptor?? [ 794.126165][T20142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.131271][ T6361] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 794.234676][T18500] usb 7-1: USB disconnect, device number 61 [ 794.381559][T20148] /dev/rnullb0: Can't open blockdev [ 794.513024][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 794.520570][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 794.527953][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 794.536656][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 794.545303][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 794.575965][T20151] virt_wifi0 speed is unknown, defaulting to 1000 [ 794.839171][T20151] chnl_net:caif_netlink_parms(): no params data found [ 794.941909][T20151] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.959033][T20151] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.975704][T20151] bridge_slave_0: entered allmulticast mode [ 794.991978][T20151] bridge_slave_0: entered promiscuous mode [ 795.006691][T20151] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.013995][T20151] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.031254][T20151] bridge_slave_1: entered allmulticast mode [ 795.039088][T20151] bridge_slave_1: entered promiscuous mode [ 795.061095][T20170] batadv_slave_1: entered promiscuous mode [ 795.093503][T20151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.110071][T20151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.169639][T20151] team0: Port device team_slave_0 added [ 795.193850][T20151] team0: Port device team_slave_1 added [ 795.262461][T20151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.280272][T20151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.306424][ C0] vkms_vblank_simulate: vblank timer overrun [ 795.333158][T20151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.366684][T20151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.383748][T20151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.409774][ C0] vkms_vblank_simulate: vblank timer overrun [ 795.447191][T20151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.537654][T20151] hsr_slave_0: entered promiscuous mode [ 795.553639][T20151] hsr_slave_1: entered promiscuous mode [ 795.569415][T20151] debugfs: 'hsr0' already exists in 'hsr' [ 795.582847][T20151] Cannot create hsr debugfs directory [ 795.777254][T20151] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.070910][T20151] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.110644][T20114] batadv_slave_1: left promiscuous mode [ 796.130135][T18500] usb 10-1: USB disconnect, device number 30 [ 796.160427][T20151] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.268539][T20151] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.391199][T20151] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 796.410374][T20151] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 796.433859][T20151] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 796.459900][T20151] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 796.585973][T20151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.606950][T20151] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.616253][ T5869] Bluetooth: hci4: command tx timeout [ 796.627251][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.634495][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.656142][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.663328][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.729213][T20151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 797.009130][T20151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.306979][T20151] veth0_vlan: entered promiscuous mode [ 797.323001][T20151] veth1_vlan: entered promiscuous mode [ 797.377185][T20151] veth0_macvtap: entered promiscuous mode [ 797.392314][T20151] veth1_macvtap: entered promiscuous mode [ 797.415179][T20151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.430334][T20151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.458046][ T7659] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.477098][ T7659] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.496583][ T7659] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.524781][ T7659] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.613447][ T7659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.634922][ T7659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.691407][ T7661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.749632][ T7661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.874161][T20259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.899889][T20259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.026595][T20273] NILFS (rnullb0): couldn't find nilfs on the device [ 798.697011][ T5869] Bluetooth: hci4: command tx timeout [ 798.744351][ T5951] usb 10-1: new low-speed USB device number 31 using dummy_hcd [ 798.774466][ T6360] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 798.874374][ T5951] usb 10-1: device descriptor read/64, error -71 [ 798.925892][ T6360] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 798.933953][ T6360] usb 7-1: config 0 has no interface number 0 [ 798.964712][ T6360] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 798.983243][ T6360] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.001302][T20324] FAULT_INJECTION: forcing a failure. [ 799.001302][T20324] name failslab, interval 1, probability 0, space 0, times 0 [ 799.002938][ T6360] usb 7-1: config 0 descriptor?? [ 799.018364][T20324] CPU: 1 UID: 0 PID: 20324 Comm: syz.8.4040 Not tainted syzkaller #0 PREEMPT(full) [ 799.018392][T20324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 799.018403][T20324] Call Trace: [ 799.018410][T20324] [ 799.018418][T20324] dump_stack_lvl+0x189/0x250 [ 799.018447][T20324] ? __pfx____ratelimit+0x10/0x10 [ 799.018469][T20324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 799.018493][T20324] ? __pfx__printk+0x10/0x10 [ 799.018518][T20324] ? __pfx___might_resched+0x10/0x10 [ 799.018537][T20324] ? lock_acquire+0x5f/0x360 [ 799.018554][T20324] should_fail_ex+0x414/0x560 [ 799.018578][T20324] should_failslab+0xa8/0x100 [ 799.018595][T20324] __kvmalloc_node_noprof+0x15c/0x5b0 [ 799.018619][T20324] ? simple_xattr_set+0x80/0x380 [ 799.018641][T20324] ? rcu_is_watching+0x15/0xb0 [ 799.018661][T20324] simple_xattr_set+0x80/0x380 [ 799.018683][T20324] ? do_raw_spin_unlock+0x122/0x240 [ 799.018706][T20324] shmem_xattr_handler_set+0x1a0/0x2d0 [ 799.018726][T20324] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 799.018744][T20324] __vfs_setxattr+0x439/0x480 [ 799.018766][T20324] __vfs_setxattr_noperm+0x12d/0x660 [ 799.018787][T20324] vfs_setxattr+0x16b/0x2f0 [ 799.018807][T20324] ? __pfx_vfs_setxattr+0x10/0x10 [ 799.018834][T20324] ? down_write_nested+0x169/0x200 [ 799.018855][T20324] ? __pfx_down_write_nested+0x10/0x10 [ 799.018877][T20324] ovl_check_setxattr+0x15a/0x310 [ 799.018898][T20324] ovl_set_opaque+0xa5/0xf0 [ 799.018921][T20324] ovl_create_or_link+0x11ad/0x1410 [ 799.018949][T20324] ? __pfx_ovl_create_or_link+0x10/0x10 [ 799.018976][T20324] ? rcu_is_watching+0x15/0xb0 [ 799.018996][T20324] ? rcu_is_watching+0x15/0xb0 [ 799.019013][T20324] ? from_vfsgid+0x72/0xa0 [ 799.019036][T20324] ? inode_init_owner+0x1ee/0x3a0 [ 799.019061][T20324] ovl_create_object+0x234/0x310 [ 799.019085][T20324] ? __pfx_ovl_create_object+0x10/0x10 [ 799.019106][T20324] ? apparmor_path_mkdir+0x1a7/0x220 [ 799.019123][T20324] ? make_vfsgid+0x49/0xa0 [ 799.019145][T20324] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 799.019169][T20324] ovl_mkdir+0x2b/0x40 [ 799.019190][T20324] vfs_mkdir+0x306/0x510 [ 799.019207][T20324] do_mkdirat+0x247/0x590 [ 799.019223][T20324] ? __pfx_do_mkdirat+0x10/0x10 [ 799.019240][T20324] ? getname_flags+0x1e5/0x540 [ 799.019261][T20324] __x64_sys_mkdir+0x6c/0x80 [ 799.019277][T20324] do_syscall_64+0xfa/0xfa0 [ 799.019299][T20324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.019315][T20324] ? clear_bhb_loop+0x60/0xb0 [ 799.019335][T20324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.019352][T20324] RIP: 0033:0x7f747558ebe9 [ 799.019368][T20324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.019383][T20324] RSP: 002b:00007f7476478038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 799.019403][T20324] RAX: ffffffffffffffda RBX: 00007f74757b5fa0 RCX: 00007f747558ebe9 [ 799.019416][T20324] RDX: 0000000000000000 RSI: 0000000000000108 RDI: 0000200000000540 [ 799.019428][T20324] RBP: 00007f7476478090 R08: 0000000000000000 R09: 0000000000000000 [ 799.019439][T20324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 799.019449][T20324] R13: 00007f74757b6038 R14: 00007f74757b5fa0 R15: 00007fff934c9408 [ 799.019467][T20324] [ 799.350233][ T6360] usb 7-1: selecting invalid altsetting 1 [ 799.374610][ T6360] dvb_ttusb_budget: ttusb_init_controller: error [ 799.380998][ T6360] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 799.404382][ T5951] usb 10-1: new low-speed USB device number 32 using dummy_hcd [ 799.480072][ T6360] DVB: Unable to find symbol cx22700_attach() [ 799.518370][ T6360] DVB: Unable to find symbol tda10046_attach() [ 799.526218][ T6360] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 799.534801][ T5951] usb 10-1: device descriptor read/64, error -71 [ 799.582559][ T6360] usb 7-1: USB disconnect, device number 62 [ 799.644646][ T5951] usb usb10-port1: attempt power cycle [ 799.716878][T20336] overlay: filesystem on ./bus not supported as upperdir [ 799.727549][T20336] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 799.807261][T20338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.818220][T20338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.984402][ T5951] usb 10-1: new low-speed USB device number 33 using dummy_hcd [ 800.017165][ T5951] usb 10-1: device descriptor read/8, error -71 [ 800.254788][ T5951] usb 10-1: new low-speed USB device number 34 using dummy_hcd [ 800.326138][ T5951] usb 10-1: device descriptor read/8, error -71 [ 800.445936][ T5951] usb usb10-port1: unable to enumerate USB device [ 800.741097][T20355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.754650][T20355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.774961][ T5869] Bluetooth: hci4: command tx timeout [ 801.351711][T20364] FAULT_INJECTION: forcing a failure. [ 801.351711][T20364] name failslab, interval 1, probability 0, space 0, times 0 [ 801.368780][T20364] CPU: 0 UID: 0 PID: 20364 Comm: syz.8.4049 Not tainted syzkaller #0 PREEMPT(full) [ 801.368809][T20364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 801.368822][T20364] Call Trace: [ 801.368830][T20364] [ 801.368838][T20364] dump_stack_lvl+0x189/0x250 [ 801.368872][T20364] ? __pfx____ratelimit+0x10/0x10 [ 801.368896][T20364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.368924][T20364] ? __pfx__printk+0x10/0x10 [ 801.368951][T20364] ? __pfx___might_resched+0x10/0x10 [ 801.368972][T20364] ? lock_acquire+0x5f/0x360 [ 801.368990][T20364] should_fail_ex+0x414/0x560 [ 801.369016][T20364] should_failslab+0xa8/0x100 [ 801.369035][T20364] __kmalloc_node_track_caller_noprof+0xcc/0x4a0 [ 801.369063][T20364] ? simple_xattr_set+0xda/0x380 [ 801.369088][T20364] ? trace_kmalloc+0x1f/0xd0 [ 801.369112][T20364] ? __kvmalloc_node_noprof+0x312/0x5b0 [ 801.369141][T20364] kstrdup+0x42/0x100 [ 801.369163][T20364] simple_xattr_set+0xda/0x380 [ 801.369190][T20364] shmem_xattr_handler_set+0x1a0/0x2d0 [ 801.369214][T20364] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 801.369236][T20364] __vfs_setxattr+0x439/0x480 [ 801.369262][T20364] __vfs_setxattr_noperm+0x12d/0x660 [ 801.369287][T20364] vfs_setxattr+0x16b/0x2f0 [ 801.369311][T20364] ? __pfx_vfs_setxattr+0x10/0x10 [ 801.369332][T20364] ? down_write_nested+0x169/0x200 [ 801.369356][T20364] ? __pfx_down_write_nested+0x10/0x10 [ 801.369381][T20364] ovl_check_setxattr+0x15a/0x310 [ 801.369403][T20364] ovl_set_opaque+0xa5/0xf0 [ 801.369431][T20364] ovl_create_or_link+0x11ad/0x1410 [ 801.369464][T20364] ? __pfx_ovl_create_or_link+0x10/0x10 [ 801.369495][T20364] ? rcu_is_watching+0x15/0xb0 [ 801.369519][T20364] ? rcu_is_watching+0x15/0xb0 [ 801.369539][T20364] ? from_vfsgid+0x72/0xa0 [ 801.369564][T20364] ? inode_init_owner+0x1ee/0x3a0 [ 801.369593][T20364] ovl_create_object+0x234/0x310 [ 801.369619][T20364] ? __pfx_ovl_create_object+0x10/0x10 [ 801.369643][T20364] ? apparmor_path_mkdir+0x1a7/0x220 [ 801.369663][T20364] ? make_vfsgid+0x49/0xa0 [ 801.369688][T20364] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 801.369716][T20364] ovl_mkdir+0x2b/0x40 [ 801.369748][T20364] vfs_mkdir+0x306/0x510 [ 801.369768][T20364] do_mkdirat+0x247/0x590 [ 801.369787][T20364] ? __pfx_do_mkdirat+0x10/0x10 [ 801.369806][T20364] ? getname_flags+0x1e5/0x540 [ 801.369831][T20364] __x64_sys_mkdir+0x6c/0x80 [ 801.369849][T20364] do_syscall_64+0xfa/0xfa0 [ 801.369875][T20364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.369894][T20364] ? clear_bhb_loop+0x60/0xb0 [ 801.369915][T20364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.369933][T20364] RIP: 0033:0x7f747558ebe9 [ 801.369950][T20364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.369968][T20364] RSP: 002b:00007f7476478038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 801.369989][T20364] RAX: ffffffffffffffda RBX: 00007f74757b5fa0 RCX: 00007f747558ebe9 [ 801.370003][T20364] RDX: 0000000000000000 RSI: 0000000000000108 RDI: 0000200000000540 [ 801.370016][T20364] RBP: 00007f7476478090 R08: 0000000000000000 R09: 0000000000000000 [ 801.370028][T20364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 801.370039][T20364] R13: 00007f74757b6038 R14: 00007f74757b5fa0 R15: 00007fff934c9408 [ 801.370060][T20364] [ 801.998007][T20377] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4054'. [ 802.007110][T20377] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4054'. [ 802.062425][T20381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4053'. [ 802.140410][T20385] loop6: detected capacity change from 0 to 7 [ 802.151311][T20383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.162244][T20383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.171995][T20383] sctp: [Deprecated]: syz.8.4055 (pid 20383) Use of int in max_burst socket option deprecated. [ 802.171995][T20383] Use struct sctp_assoc_value instead [ 802.175686][T16222] Dev loop6: unable to read RDB block 7 [ 802.198474][T16222] loop6: unable to read partition table [ 802.205486][T16222] loop6: partition table beyond EOD, truncated [ 802.213817][T20385] Dev loop6: unable to read RDB block 7 [ 802.220817][T20385] loop6: unable to read partition table [ 802.229569][T20385] loop6: partition table beyond EOD, truncated [ 802.237456][T20385] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 802.274392][ T6360] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 802.424662][ T6360] usb 10-1: Using ep0 maxpacket: 8 [ 802.432537][ T6360] usb 10-1: config 0 has no interfaces? [ 802.441947][ T6360] usb 10-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 802.452040][ T6360] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.472195][ T6360] usb 10-1: Product: syz [ 802.477665][ T6360] usb 10-1: Manufacturer: syz [ 802.492577][ T6360] usb 10-1: SerialNumber: syz [ 802.500327][ T6360] usb 10-1: config 0 descriptor?? [ 802.583143][T20413] vivid-000: disconnect [ 802.648355][T20413] dvmrp1: entered allmulticast mode [ 802.739272][ T6360] usb 10-1: USB disconnect, device number 35 [ 802.745935][T20412] vivid-000: reconnect [ 802.791120][T20416] /dev/rnullb0: Can't open blockdev [ 802.854575][ T5869] Bluetooth: hci4: command tx timeout [ 802.875992][T20419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.887588][T20419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.082345][T20431] sctp: [Deprecated]: syz.8.4069 (pid 20431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 803.082345][T20431] Use struct sctp_sack_info instead [ 803.182484][T20435] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 803.216184][T20433] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4070'. [ 803.225784][T20433] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4070'. [ 803.984900][T20465] /dev/rnullb0: Can't open blockdev [ 803.991307][ C1] ------------[ cut here ]------------ [ 803.996849][ C1] WARNING: ./include/linux/skbuff.h:1165 at nf_send_unreach6+0x828/0xa20, CPU#1: kworker/1:3/5897 [ 804.007504][ C1] Modules linked in: [ 804.011439][ C1] CPU: 1 UID: 0 PID: 5897 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 804.020884][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 804.031032][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 804.037222][ C1] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 804.042899][ C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 804.062662][ C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246 [ 804.068784][ C1] RAX: ffffffff8a51b3b7 RBX: ffff8880671ab500 RCX: ffff888078e95a00 [ 804.076825][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 804.084849][ C1] RBP: ffffc90000a08568 R08: ffff888022b7de03 R09: 1ffff1100456fbc0 [ 804.092839][ C1] R10: dffffc0000000000 R11: ffffed100456fbc1 R12: ffff88805b788101 [ 804.100845][ C1] R13: dffffc0000000001 R14: 1ffff1100ce356ab R15: 0000000000000000 [ 804.108894][ C1] FS: 0000000000000000(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 804.117911][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.124747][ C1] CR2: 000055556435c5c8 CR3: 0000000038a42000 CR4: 00000000003526f0 [ 804.133101][ C1] Call Trace: [ 804.136424][ C1] [ 804.139292][ C1] ? __pfx_nf_send_unreach6+0x10/0x10 [ 804.144718][ C1] ? lock_release+0x4b/0x3e0 [ 804.149336][ C1] nft_reject_inet_eval+0x441/0x690 [ 804.154590][ C1] nft_do_chain+0x40c/0x1920 [ 804.159381][ C1] ? __pfx_wg_receive+0x10/0x10 [ 804.164289][ C1] ? __pfx_udpv6_queue_rcv_one_skb+0x10/0x10 [ 804.170297][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 804.175398][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 804.180291][ C1] nft_do_chain_inet+0x25d/0x340 [ 804.185303][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 804.190805][ C1] ? NF_HOOK+0x9a/0x3a0 [ 804.195029][ C1] ? rcu_is_watching+0x15/0xb0 [ 804.199831][ C1] ? lock_acquire+0x5f/0x360 [ 804.204481][ C1] ? ip_sabotage_in+0x57/0x270 [ 804.209281][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 804.214792][ C1] nf_hook_slow+0xc5/0x220 [ 804.219246][ C1] NF_HOOK+0x206/0x3a0 [ 804.223455][ C1] ? skb_orphan+0xaf/0xd0 [ 804.227924][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 804.233151][ C1] ? NF_HOOK+0x9a/0x3a0 [ 804.237448][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 804.242062][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 804.247323][ C1] __netif_receive_skb+0xd3/0x380 [ 804.252397][ C1] ? process_backlog+0x2d5/0x14f0 [ 804.257477][ C1] process_backlog+0x60e/0x14f0 [ 804.262365][ C1] ? __pfx_process_backlog+0x10/0x10 [ 804.267702][ C1] ? xdp_do_check_flushed+0x21b/0x240 [ 804.273198][ C1] __napi_poll+0xc4/0x360 [ 804.277627][ C1] ? rcu_is_watching+0x15/0xb0 [ 804.282414][ C1] net_rx_action+0x707/0xe30 [ 804.287062][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 804.292255][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 804.298999][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 804.304267][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 804.309581][ C1] handle_softirqs+0x283/0x870 [ 804.314391][ C1] ? do_softirq+0xec/0x180 [ 804.318825][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 804.324128][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 804.330416][ C1] do_softirq+0xec/0x180 [ 804.334705][ C1] [ 804.337648][ C1] [ 804.340588][ C1] ? __pfx_do_softirq+0x10/0x10 [ 804.345475][ C1] ? rcu_is_watching+0x15/0xb0 [ 804.350265][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 804.355509][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 804.361264][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 804.366334][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 804.372079][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 804.377249][ C1] ? rcu_is_watching+0x15/0xb0 [ 804.382044][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 804.387816][ C1] process_scheduled_works+0xae1/0x17b0 [ 804.393395][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 804.399425][ C1] worker_thread+0x8a0/0xda0 [ 804.404049][ C1] kthread+0x711/0x8a0 [ 804.408178][ C1] ? __pfx_worker_thread+0x10/0x10 [ 804.413317][ C1] ? __pfx_kthread+0x10/0x10 [ 804.417962][ C1] ? rcu_is_watching+0x15/0xb0 [ 804.422869][ C1] ? __pfx_kthread+0x10/0x10 [ 804.427517][ C1] ret_from_fork+0x47c/0x820 [ 804.432317][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 804.437477][ C1] ? __switch_to_asm+0x39/0x70 [ 804.442260][ C1] ? __switch_to_asm+0x33/0x70 [ 804.447070][ C1] ? __pfx_kthread+0x10/0x10 [ 804.451746][ C1] ret_from_fork_asm+0x1a/0x30 [ 804.456566][ C1] [ 804.459652][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 804.466965][ C1] CPU: 1 UID: 0 PID: 5897 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 804.476360][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 804.486440][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 804.492552][ C1] Call Trace: [ 804.495835][ C1] [ 804.498683][ C1] dump_stack_lvl+0x99/0x250 [ 804.503284][ C1] ? __asan_memcpy+0x40/0x70 [ 804.507878][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 804.513110][ C1] ? __pfx__printk+0x10/0x10 [ 804.517737][ C1] vpanic+0x281/0x750 [ 804.521763][ C1] ? __pfx_vpanic+0x10/0x10 [ 804.526278][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 804.531585][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 804.536884][ C1] panic+0xb9/0xc0 [ 804.540608][ C1] ? __pfx_panic+0x10/0x10 [ 804.545036][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 804.549975][ C1] __warn+0x334/0x4c0 [ 804.553956][ C1] ? nf_send_unreach6+0x828/0xa20 [ 804.559073][ C1] ? nf_send_unreach6+0x828/0xa20 [ 804.564103][ C1] report_bug+0x2be/0x4f0 [ 804.568435][ C1] ? nf_send_unreach6+0x828/0xa20 [ 804.573471][ C1] ? nf_send_unreach6+0x828/0xa20 [ 804.578592][ C1] ? nf_send_unreach6+0x82a/0xa20 [ 804.583629][ C1] handle_bug+0x84/0x160 [ 804.588303][ C1] exc_invalid_op+0x1a/0x50 [ 804.592823][ C1] asm_exc_invalid_op+0x1a/0x20 [ 804.597671][ C1] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 804.603315][ C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 804.622938][ C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246 [ 804.629025][ C1] RAX: ffffffff8a51b3b7 RBX: ffff8880671ab500 RCX: ffff888078e95a00 [ 804.637322][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 804.645472][ C1] RBP: ffffc90000a08568 R08: ffff888022b7de03 R09: 1ffff1100456fbc0 [ 804.653447][ C1] R10: dffffc0000000000 R11: ffffed100456fbc1 R12: ffff88805b788101 [ 804.661509][ C1] R13: dffffc0000000001 R14: 1ffff1100ce356ab R15: 0000000000000000 [ 804.669491][ C1] ? nf_send_unreach6+0x827/0xa20 [ 804.674538][ C1] ? __pfx_nf_send_unreach6+0x10/0x10 [ 804.679926][ C1] ? lock_release+0x4b/0x3e0 [ 804.684523][ C1] nft_reject_inet_eval+0x441/0x690 [ 804.689771][ C1] nft_do_chain+0x40c/0x1920 [ 804.694364][ C1] ? __pfx_wg_receive+0x10/0x10 [ 804.699213][ C1] ? __pfx_udpv6_queue_rcv_one_skb+0x10/0x10 [ 804.705286][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 804.710310][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 804.715274][ C1] nft_do_chain_inet+0x25d/0x340 [ 804.720212][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 804.725845][ C1] ? NF_HOOK+0x9a/0x3a0 [ 804.730007][ C1] ? rcu_is_watching+0x15/0xb0 [ 804.734780][ C1] ? lock_acquire+0x5f/0x360 [ 804.739380][ C1] ? ip_sabotage_in+0x57/0x270 [ 804.744150][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 804.749610][ C1] nf_hook_slow+0xc5/0x220 [ 804.754061][ C1] NF_HOOK+0x206/0x3a0 [ 804.758158][ C1] ? skb_orphan+0xaf/0xd0 [ 804.762551][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 804.767959][ C1] ? NF_HOOK+0x9a/0x3a0 [ 804.772318][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 804.776937][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 804.782154][ C1] __netif_receive_skb+0xd3/0x380 [ 804.787242][ C1] ? process_backlog+0x2d5/0x14f0 [ 804.792275][ C1] process_backlog+0x60e/0x14f0 [ 804.797135][ C1] ? __pfx_process_backlog+0x10/0x10 [ 804.802431][ C1] ? xdp_do_check_flushed+0x21b/0x240 [ 804.807899][ C1] __napi_poll+0xc4/0x360 [ 804.812232][ C1] ? rcu_is_watching+0x15/0xb0 [ 804.816998][ C1] net_rx_action+0x707/0xe30 [ 804.821597][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 804.826719][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 804.833055][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 804.838275][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 804.843560][ C1] handle_softirqs+0x283/0x870 [ 804.848410][ C1] ? do_softirq+0xec/0x180 [ 804.852913][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 804.858199][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 804.864181][ C1] do_softirq+0xec/0x180 [ 804.868423][ C1] [ 804.871357][ C1] [ 804.874285][ C1] ? __pfx_do_softirq+0x10/0x10 [ 804.879140][ C1] ? rcu_is_watching+0x15/0xb0 [ 804.883902][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 804.889105][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 804.894832][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 804.899897][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 804.905659][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 804.910769][ C1] ? rcu_is_watching+0x15/0xb0 [ 804.915536][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 804.921256][ C1] process_scheduled_works+0xae1/0x17b0 [ 804.926828][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 804.932817][ C1] worker_thread+0x8a0/0xda0 [ 804.937426][ C1] kthread+0x711/0x8a0 [ 804.941520][ C1] ? __pfx_worker_thread+0x10/0x10 [ 804.946642][ C1] ? __pfx_kthread+0x10/0x10 [ 804.951250][ C1] ? rcu_is_watching+0x15/0xb0 [ 804.956021][ C1] ? __pfx_kthread+0x10/0x10 [ 804.960615][ C1] ret_from_fork+0x47c/0x820 [ 804.965211][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 804.970329][ C1] ? __switch_to_asm+0x39/0x70 [ 804.975181][ C1] ? __switch_to_asm+0x33/0x70 [ 804.979944][ C1] ? __pfx_kthread+0x10/0x10 [ 804.984624][ C1] ret_from_fork_asm+0x1a/0x30 [ 804.989413][ C1] [ 804.992807][ C1] Kernel Offset: disabled [ 804.997143][ C1] Rebooting in 86400 seconds..