last executing test programs: 6.224153094s ago: executing program 3 (id=109): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x40010, r0, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0xf, 0x0, '\x00', {0x0, @bt={0x5, 0x3166, 0x0, 0x2, 0x0, 0x800, 0x7, 0x6, 0x7f, 0xffff, 0x0, 0x4, 0x5, 0x4, 0xf, 0x13, {0x5, 0x5}, 0x0, 0x81}}}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) 5.715207884s ago: executing program 3 (id=111): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0}) ioprio_set$pid(0x1, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 5.577184477s ago: executing program 3 (id=114): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="200f05"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66002, 0x0) (rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) socket(0x23, 0x80805, 0x2) (async) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 3.58840061s ago: executing program 1 (id=123): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/2416], 0x970) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000000a01080000000000000000070000000900010073797a30000000000c00044000000000000000044c00060098d560227defe8a9e949f23891071949edba7a5b59dc884427bff96fac71f2db1e12bcef82bf040f716d96376fac5d28236b656fa5044c44e4dd9a2b37a2fe55337e1029dd978eb454000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000440ffffff"], 0x17c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x80, 0x702, 0x2, 0x4, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x26a, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.521522787s ago: executing program 2 (id=124): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60202, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x7d}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}}, 0x0) r2 = epoll_create1(0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x4e) ioctl$USBDEVFS_WAIT_FOR_RESUME(r3, 0x5523) close(r3) userfaultfd(0x80801) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.nlink\x00', &(0x7f0000000100)=""/120, 0x78) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000080)={&(0x7f0000000180)=""/33, 0x21}) 2.859729228s ago: executing program 0 (id=125): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x44000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x8000001}) modify_ldt$write(0x1, &(0x7f0000000040)={0xc, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x79c5}, {0x0, 0x30}], 0x2) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x11, 0x20, 0x17, 0xa, 0x0, 0x4, 0x6, 0x106, 0x1}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x44000, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x8000001}) (async) modify_ldt$write(0x1, &(0x7f0000000040)={0xc, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) (async) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) (async) fcntl$dupfd(r3, 0x406, r3) (async) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x79c5}, {0x0, 0x30}], 0x2) (async) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x11, 0x20, 0x17, 0xa, 0x0, 0x4, 0x6, 0x106, 0x1}) (async) 2.853184158s ago: executing program 1 (id=126): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x40) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000580)=ANY=[@ANYBLOB="0491"], 0x2, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000016c0)=ANY=[@ANYBLOB="a8000000020165"], 0xa8}}, 0x25752c6d1b64375e) prctl$PR_GET_TIMERSLACK(0x1e) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x164, 0x2, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TUPLE_MASTER={0x78, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_LABELS_MASK={0x20, 0x17, [0xffffff80, 0xfff, 0xe3, 0x2fcd, 0xfffffff8, 0x10000, 0x6]}, @CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0xffffff58, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x83d}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x1]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x88d0}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x100, 0x2, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x401, 0x0, 0x2b98, 0x80000001, 0x9, 0x9]}, @CTA_ID={0x8}, @CTA_ZONE={0x6}, @CTA_LABELS_MASK={0x18, 0x17, [0xfffffffe, 0x3, 0x5, 0xffffffff, 0x7]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x93b, 0x8, 0x6, 0x4, 0x7]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x100000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x48}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xc}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3a40000}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1f1}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9a38}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0xc00005c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2.801768097s ago: executing program 0 (id=127): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2c, 0x0, 0x1, 0x505, 0x0, 0x0, {0x3}, [@CTA_TUPLE_ORIG={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040081}, 0x40c0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x49, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x44805}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000200)=[{{0x4}, {0x2, 0x0, 0x1, 0x1}}], 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) close_range(r3, r4, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='hpfs\x00', 0x20c002, 0x0) 2.62975438s ago: executing program 0 (id=128): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0xe5e6}, &(0x7f0000000140)=0x8) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) sendfile(r2, r2, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) (rerun: 32) 2.54408591s ago: executing program 2 (id=129): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) (async) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) (async) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) (async, rerun: 32) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) (rerun: 32) 2.507305899s ago: executing program 3 (id=130): pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_rx_ntuple={0x35, {0x2, @esp_ip4_spec={@private=0xa010102, @private=0xa010101, 0x7, 0x8}, @ah_ip4_spec={@multicast2, @remote, 0x8}, 0x400, 0x800, 0x3, 0xc6, 0xffffffffffffffff}}}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)) recvmmsg(r0, &(0x7f0000002200)=[{{&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/37, 0x25}, {&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/146, 0x92}, {&(0x7f0000000500)=""/43, 0x2b}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/45, 0x2d}], 0x8, &(0x7f0000000700)=""/241, 0xf1}, 0x6}, {{&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/98, 0x62}], 0x2, &(0x7f0000001940)=""/96, 0x60}}, {{&(0x7f00000019c0)=@tipc=@id, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001a40)=""/255, 0xff}, {&(0x7f0000001b40)=""/57, 0x39}, {&(0x7f0000001b80)=""/67, 0x43}, {&(0x7f0000001c00)=""/132, 0x84}, {&(0x7f0000001cc0)=""/245, 0xf5}, {&(0x7f0000001dc0)=""/66, 0x42}, {&(0x7f0000001e40)=""/118, 0x76}, {&(0x7f0000001ec0)=""/113, 0x71}], 0x8, &(0x7f0000001fc0)=""/5, 0x5}, 0x1}, {{&(0x7f0000002000)=@nl=@proc, 0x80, &(0x7f00000020c0)=[{&(0x7f0000002080)=""/44, 0x2c}], 0x1, &(0x7f0000002100)=""/238, 0xee}, 0xffff061b}], 0x4, 0x10000, &(0x7f0000002300)={0x0, 0x3938700}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002340)=0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000002380)={0x27, r1, 0x0, 0x7}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000023c0)='wg1\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002400)={'wg2\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', &(0x7f0000002480)={0x8981, 0x5734a33fc3b7103e, 0x4}, 0x18) r5 = openat2(r4, &(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x1}, 0x18) read$FUSE(r5, &(0x7f0000002540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r6, 0xee00) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000004580), &(0x7f00000045c0)=0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000004600)={{{@in6=@mcast2, @in6=@private2}}, {{@in6=@mcast2}}}, &(0x7f0000004700)=0xe8) close(r3) syz_open_dev$video4linux(&(0x7f0000004740), 0x1, 0x0) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000004780)={0xe, 0xc0, 0x1, 0x8, 0x10, "dd4aa2731b4cdb962969d3f421eeb23396f78d"}) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f00000047c0)={{0x6, 0xca55}, {0x6, 0x3}, 0xdfc}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000004840), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SDREQ(r7, &(0x7f0000004980)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004940)={&(0x7f0000004880)={0x84, r8, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_LLC_SDP={0x68, 0x13, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [{0x8, 0x1, 'wg1\x00'}]}, {0x58, 0x0, 0x0, 0x1, [{0x11, 0x1, 'veth0_to_hsr\x00'}, {0x15, 0x1, '/dev/v4l-subdev#\x00'}, {0x15, 0x1, '\\{+/,@+.(!(\x96##(\x0f-'}, {0xa, 0x1, '@$[]*%'}, {0x4}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c0) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000500, r6, &(0x7f00000049c0)) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000004a00), 0x2, 0x0) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000004a40)={{r2}, 0x1, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000004cc0)={&(0x7f0000004a80)=@in6={0xa, 0x4e23, 0x2308, @local, 0x4}, 0x1c, &(0x7f0000004bc0)=[{&(0x7f0000004ac0)="0cea67edc00f09e0d2107fb02f583a42cce9ec360313c0702d20b9a948b7fa7d3c2b4f959a454a6d0ef05ff78ce5dccac6cf47e0d34a38e3117a6698092676c5979000659f47588a71bca3edf894f1bb612f49bd8616d035f499089ccb7a9b094fcfdc746154cbcfb948a44845f32c250a409be6b2309f1d193afdfbe4d9eba64a3d07f8bbfeb0810a06cab6ce871ce86f2cf9b792341fbe07526a04ee84c33bc057f079e410672edf6fcedbaaa5fe8780cdd048bc561b139c338ccf5560989cacb87ae7afbee5d3fec5a72f4153f866f112ed9d6256ad56df0cdde443b2fd3b1d0459c49635cf16f3975209993bb03910374bae95", 0xf5}], 0x1, &(0x7f0000004c00)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0xc}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}, @init={0x18, 0x84, 0x0, {0x9, 0x6, 0x8000}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x5}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @init={0x18, 0x84, 0x0, {0xffff, 0x5, 0x1, 0x4b4a}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x26}}], 0xb0, 0x5}, 0x40840) shutdown(r5, 0x0) 2.42784522s ago: executing program 2 (id=131): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14010a00000000000000001e00000056d0858a4d1a91b6295d7caa7d624ddf236504aa298c9e400009517a4b643d9c00009851d3b669811e5aa10dee7b4acf4d5726d8d0e4c513a90a7724334866bb10dc89de68e580fc00f75ac8b4d0f82c0cf2ecc1c2a05ad9a13db54ace6d9a3b6a40eec47e892f46e2b1e9099999d161a789828ec5995a9cbf2405064473af1e7d96a2da4d8e3e6ed768964f4c1a3f87dacf310282ebf2fa128ddd103369f71659b36084ab3bc6a432059b7e3f90a4a5a6bc1b17de1db0709367ff"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r3, 0x92, 0x5, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000071401"], 0x10}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2000) ioctl$CEC_DQEVENT(r5, 0xc0506107, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r3, 0xa4717000) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14010a00000000000000001e00000056d0858a4d1a91b6295d7caa7d624ddf236504aa298c9e400009517a4b643d9c00009851d3b669811e5aa10dee7b4acf4d5726d8d0e4c513a90a7724334866bb10dc89de68e580fc00f75ac8b4d0f82c0cf2ecc1c2a05ad9a13db54ace6d9a3b6a40eec47e892f46e2b1e9099999d161a789828ec5995a9cbf2405064473af1e7d96a2da4d8e3e6ed768964f4c1a3f87dacf310282ebf2fa128ddd103369f71659b36084ab3bc6a432059b7e3f90a4a5a6bc1b17de1db0709367ff"], 0x14}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) fadvise64(r3, 0x92, 0x5, 0x2) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000071401"], 0x10}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) (async) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2000) (async) ioctl$CEC_DQEVENT(r5, 0xc0506107, &(0x7f00000000c0)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r3, 0xa4717000) (async) 2.315796814s ago: executing program 3 (id=132): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000240)={0x20, 0x14, 0x6, "23e65a564d3c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000180)={0x20, 0x5, 0x1, "7f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xc4, 0x0, 0x4}) (async) socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8004a, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xa901, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) (async) r4 = userfaultfd(0x801) read$FUSE(0xffffffffffffffff, &(0x7f0000001a00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffe4d) (async) stat(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000340)={0x6, 0x7, {r5}, {r6}, 0x6, 0x1d}) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x43, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 1.824703431s ago: executing program 1 (id=133): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f00000000c0)={0x6, "2708864125d8b969c59e5b1e3c4200a96641b586bbfd5dfcfc0da2c56905158f"}) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000180)=0x1e) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000006c000100"], 0x18}, 0x1, 0x0, 0x0, 0x48001}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000440)={{r1}, r2, 0xa, @unused=[0x7, 0x40000000006, 0x3, 0x6b0], @name="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"}) r3 = fsopen(&(0x7f0000000140)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000040)='-/\x00', 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x810, r4, 0x5708e000) 1.719267027s ago: executing program 0 (id=134): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) preadv2(r0, 0x0, 0x0, 0x8, 0xa, 0x2) (async) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket(0x40000000015, 0x5, 0x0) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8919, 0x0) (async) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) (async) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x1000000, 0x0, 0x2000000}}) (async) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x214002, 0x0) 1.718338761s ago: executing program 1 (id=135): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x9, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd000011000000000000006812a209002806fffe800000000000000000000000000000ff"], 0x5e) syz_usb_connect(0x1, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0) (async) r4 = socket(0x2c, 0x0, 0x10000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) ioctl(r4, 0x8930, &(0x7f0000000180)) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r6 = syz_open_dev$radio(&(0x7f0000000180), 0x1, 0x2) read(r6, 0x0, 0x0) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r7, &(0x7f0000000000)='?\x00\x00\x00', 0x4) (async) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) lseek(r8, 0x3, 0x4) r9 = socket$can_j1939(0x1d, 0x2, 0x7) timer_delete(r1) sendfile(r9, r5, 0x0, 0x7ffff000) 1.647892342s ago: executing program 2 (id=136): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) r1 = add_key$user(&(0x7f0000000240), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="41db", 0x2, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f00000004c0)={0x0, "c9fb508ab3d3e36992ba54976ef3192136aea4abf8ed2c34406a874f9a5a6146544a94076dd77a06a47cef9c95cbe76d531057ecc9ea6929db8cfff99249e36f", 0x3f}, 0x48, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x2208080, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r5 = dup(r0) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f0000000040)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0x40505331, &(0x7f0000000180)={0xf, 0x0, 0x0, 'queue1\x00'}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000551000/0x400000)=nil) 1.58417834s ago: executing program 0 (id=137): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165642, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0900000000000000000002000000140001"], 0x28}}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822681) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) read$sequencer(r2, 0x0, 0x0) write(r1, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 1.364539257s ago: executing program 0 (id=138): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000500)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r2, 0x8}, &(0x7f0000000240)=0x8) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000020ef0e01000000000000010902240001000080000904000001f2ff0100092100000001220500090581"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, 0xffffffffffffffff, 0x2000) 1.018827245s ago: executing program 2 (id=139): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) gettid() mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 653.107768ms ago: executing program 3 (id=140): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x1a) fanotify_init(0x2, 0x1000) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x861, 0xc}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000a40)='./file2\x00', 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r3, r0, 0x0, 0x7fffefff) fadvise64(r0, 0x9, 0x9, 0x2) sendfile(r0, r0, 0x0, 0x7ffff003) 412.404435ms ago: executing program 1 (id=141): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000940)=""/225, 0xe1}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f0000000e40)=""/202, 0xca}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000880)=""/189, 0xbd}, {&(0x7f0000000580)=""/182, 0xb6}, {&(0x7f0000002a00)=""/4068, 0xfe4}, {&(0x7f0000000140)=""/127, 0x7f}], 0x9}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) listen(r2, 0x5) (async, rerun: 64) shutdown(r2, 0x0) (async, rerun: 64) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x161) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async, rerun: 32) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (rerun: 32) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) (async) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000380)="f76d3a4a715b35d4f9dbbe0729fb86eee4cf348600911abc8ef03f50424ec43b4a28e2b9f47fccd4de2917875a9cd6ff7141a639c996b79c8b7c42336cbd5aa48c4ff22b9171b46d76b7cbfc9377d0ce7ece09f916e1d775db389e89b6e6f805f680b488e996a464a30689fbe5e5627b90f41997c0e11de47e701bbc28d76fb803167b95a6a6da566e1e93b322e53fd290fbd6e74632669ec32300bbfcbb809e718b7787def7d7baa26ad0e63fd203c743a5ff0e3f4b360000", 0xb9, 0xfffffffffffffffc) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r6, &(0x7f0000000a40)) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x46, "6dcdea43de51e3b3fcf8ef800edfa74d935a4b26ebe785c15c9d1035b52b206636463ed0223414b054fddec34abd5a61d5e23e6e41aa69410cfd88d7df45c1a0ed95c2e0622b"}, 0x0}) (async, rerun: 32) ioctl$HIDIOCGCOLLECTIONINDEX(r5, 0x40184810, 0x0) (rerun: 32) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, 0x5, 0x6, 0x304, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044015}, 0x24004820) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 168.090601ms ago: executing program 1 (id=142): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) (async) r1 = socket(0x2, 0x1, 0x0) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) (async, rerun: 32) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000bd688429913f388814f9c892c5e8639bdbe24b8d054ef1c4d17613b7b574bd031d7b550e8f05de80d331083310807fc91094eca65df908c3b9a3b07c88f9ac1b682681d80eff42e23e6a7aaa5cf4ed876cae814fdcca900ec6043c38a4759cf23e16cecfea11d35dcfe3aed33e3f961eb76dd94ad34ff4e4c385e001fcbc16ab6f32afd1d8e538f94a8bf788851a3cfc7adef10a39aee11042e73e35e17ed0b0eedc9c9e2e25a3b6da9921c4888462e9488acf5662", @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf250900000008000300", @ANYRESOCT=r3, @ANYRES8=0x0], 0x24}}, 0x84) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 0s ago: executing program 2 (id=143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0xa, 0xffffffffffffffff, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x76, &(0x7f0000000080)=[@vmwrite={0x8, 0x0, 0x11, 0x0, 0x2, 0x0, 0x2, 0x0, 0x10001}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000540)={{0x80a0000, 0x8000000, 0x8, 0x9, 0xfb, 0xd2, 0x40, 0x7f, 0x0, 0x0, 0x19}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x41, 0x5, 0x7d, 0x9, 0x5, 0x3, 0x3, 0xb4}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x1, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x8, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x4, 0x42, 0xb, 0xf8, 0x8, 0x7, 0xe, 0xf1}, {0xeeee0000, 0x1000, 0xb, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x3, 0x83, 0xf7, 0x7f}, {0x1000, 0x80a0000, 0xc, 0x7, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0xdddd1000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0xdddd0000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x1000, 0x7}, 0x80000031, 0x0, 0x8080000, 0x2026, 0x40003, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="a1ab01000000000000003200000008000300", @ANYRES32=r9, @ANYBLOB="38d24011699d587f418eb1c31eff1f9d94296ee2c2f0bc5ff1bde8e51143f6f38c4ec2ed9a7c8d6fad5e50df5063f476b768728e5a76cc1f61930888a482ff8cce3ac9940ad8ef64b59b0e79b6526a61f0791bfb95015d5d9dae4fe09aeaba6aa04a255d16080f8c50887131d5913c"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x260a00, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x7fff, 0x0, 0x8000008c1f, 0x800000000, 0x0, 0xbc, 0x400, 0x6, 0x0, 0x0, 0x81, 0x80000000000, 0x7125, 0x1, 0x102, 0x200, 0xfffffffffffffffc, 0x1, 0x3, 0x4, 0x1, 0xffff, 0x0, 0x8, 0x0, 0x80000000000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r10, 0xebe3b000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) madvise(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0xe) r11 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt(r11, 0x0, 0x7f, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r12, 0x80184151, &(0x7f0000000140)={0x0, &(0x7f0000000040)="af1172be4e800dbd6907178ed547f8320f8428a0601052af467d6db934539f44b658cf3a4f3b697ac163f7f839d1bea2eb57290278d37df5cc73cb9dc768a21cb054de3bd6eafbdb7dc3e22f74c6eb6b0a90e9f09ca14d09a3ad8bbb794a1c341e35f8c281e225e7a2c46ba8cd74a20e582c2490b4e0d7341566cef1648fbd00eacfcbfe51589cc31f6277040342d11df12b74cf9a543415ea11ddec00f860b7c00bd43832111888a2d959b08e2bc81f60b8abc787005c330a37f466569f87020d5c1156ad0a6682e3751a9e0f08ad3ae63ce5fb", 0xd4}) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r13, 0x4b3a, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 71.735282][ T5848] cgroup: Unknown subsys name 'net' [ 71.859248][ T5848] cgroup: Unknown subsys name 'cpuset' [ 71.867469][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.195526][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.682735][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.697387][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.705522][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.713719][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.721812][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.738959][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.746335][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.763983][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.772046][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.810698][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.813569][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.825569][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.825710][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.840991][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.848918][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.856514][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.865249][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.872502][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.885005][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.892323][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.067168][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 77.159966][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.166412][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.191759][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.199324][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.206596][ T5857] bridge_slave_0: entered allmulticast mode [ 77.213959][ T5857] bridge_slave_0: entered promiscuous mode [ 77.223746][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.231115][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.238407][ T5857] bridge_slave_1: entered allmulticast mode [ 77.245088][ T5857] bridge_slave_1: entered promiscuous mode [ 77.301548][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 77.329510][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.359737][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.404692][ T5857] team0: Port device team_slave_0 added [ 77.411398][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 77.429209][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 77.441108][ T5857] team0: Port device team_slave_1 added [ 77.507271][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.514274][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.540443][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.552757][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.560074][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.586529][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.644276][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.651879][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.659354][ T5866] bridge_slave_0: entered allmulticast mode [ 77.666046][ T5866] bridge_slave_0: entered promiscuous mode [ 77.697623][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.704882][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.712494][ T5866] bridge_slave_1: entered allmulticast mode [ 77.719513][ T5866] bridge_slave_1: entered promiscuous mode [ 77.734290][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.741611][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.749385][ T5862] bridge_slave_0: entered allmulticast mode [ 77.756182][ T5862] bridge_slave_0: entered promiscuous mode [ 77.763886][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.772108][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.779339][ T5863] bridge_slave_0: entered allmulticast mode [ 77.786073][ T5863] bridge_slave_0: entered promiscuous mode [ 77.809342][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.816486][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.824467][ T5862] bridge_slave_1: entered allmulticast mode [ 77.831600][ T5862] bridge_slave_1: entered promiscuous mode [ 77.840015][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.848741][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.856878][ T5863] bridge_slave_1: entered allmulticast mode [ 77.863960][ T5863] bridge_slave_1: entered promiscuous mode [ 77.881645][ T5857] hsr_slave_0: entered promiscuous mode [ 77.888701][ T5857] hsr_slave_1: entered promiscuous mode [ 77.912353][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.923968][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.950499][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.970169][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.990655][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.010574][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.034085][ T5866] team0: Port device team_slave_0 added [ 78.068231][ T5866] team0: Port device team_slave_1 added [ 78.083327][ T5862] team0: Port device team_slave_0 added [ 78.094428][ T5863] team0: Port device team_slave_0 added [ 78.102578][ T5863] team0: Port device team_slave_1 added [ 78.117434][ T5862] team0: Port device team_slave_1 added [ 78.163054][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.170598][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.196999][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.219267][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.226445][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.254021][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.265607][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.272785][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.299617][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.311552][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.319251][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.346858][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.362182][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.369355][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.397406][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.416891][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.424498][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.451505][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.533947][ T5863] hsr_slave_0: entered promiscuous mode [ 78.540733][ T5863] hsr_slave_1: entered promiscuous mode [ 78.547080][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 78.552976][ T5863] Cannot create hsr debugfs directory [ 78.562101][ T5866] hsr_slave_0: entered promiscuous mode [ 78.568418][ T5866] hsr_slave_1: entered promiscuous mode [ 78.574920][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 78.581210][ T5866] Cannot create hsr debugfs directory [ 78.628658][ T5862] hsr_slave_0: entered promiscuous mode [ 78.635029][ T5862] hsr_slave_1: entered promiscuous mode [ 78.641682][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 78.647742][ T5862] Cannot create hsr debugfs directory [ 78.716183][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.740580][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.756967][ T5869] Bluetooth: hci0: command tx timeout [ 78.765568][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.785631][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.915088][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.922129][ T5869] Bluetooth: hci1: command tx timeout [ 78.922179][ T5869] Bluetooth: hci3: command tx timeout [ 78.926914][ T5869] Bluetooth: hci2: command tx timeout [ 78.941841][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.951552][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.961709][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.010276][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.020796][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.033391][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.043794][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.094117][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.112917][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.122762][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.138332][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.168537][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.202578][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.221256][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.228410][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.247818][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.254977][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.314810][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.340398][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.376183][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.395518][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.428035][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.441015][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.462169][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.470394][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.484589][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.492797][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.513797][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.521278][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.540767][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.548930][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.586675][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.624035][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.631572][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.642370][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.664299][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.671707][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.766661][ T5862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.781195][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.869986][ T5857] veth0_vlan: entered promiscuous mode [ 79.899822][ T5857] veth1_vlan: entered promiscuous mode [ 79.953112][ T5857] veth0_macvtap: entered promiscuous mode [ 79.978657][ T5857] veth1_macvtap: entered promiscuous mode [ 80.013012][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.024376][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.059605][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.072804][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.086573][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.096605][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.111406][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.120845][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.130116][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.204674][ T5863] veth0_vlan: entered promiscuous mode [ 80.222389][ T5866] veth0_vlan: entered promiscuous mode [ 80.235420][ T5863] veth1_vlan: entered promiscuous mode [ 80.241167][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.249722][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.268229][ T5866] veth1_vlan: entered promiscuous mode [ 80.308025][ T5863] veth0_macvtap: entered promiscuous mode [ 80.314817][ T5862] veth0_vlan: entered promiscuous mode [ 80.320508][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.329387][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.341101][ T5863] veth1_macvtap: entered promiscuous mode [ 80.356371][ T5862] veth1_vlan: entered promiscuous mode [ 80.389503][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.397620][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.404607][ T5866] veth0_macvtap: entered promiscuous mode [ 80.435830][ T5866] veth1_macvtap: entered promiscuous mode [ 80.460370][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.485873][ T5862] veth0_macvtap: entered promiscuous mode [ 80.497235][ T3512] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.506127][ T3512] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.528822][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.536665][ T3512] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.548638][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.568104][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.576893][ T5862] veth1_macvtap: entered promiscuous mode [ 80.592060][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.602949][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.628573][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.645781][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.670425][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.701326][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.723757][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.729200][ T5947] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.735048][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.775928][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.786603][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.815536][ T5947] syz.0.5 uses obsolete (PF_INET,SOCK_PACKET) [ 80.824671][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.833941][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.843250][ T5869] Bluetooth: hci0: command tx timeout [ 80.852973][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.871069][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.908992][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.924081][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.008761][ T5869] Bluetooth: hci2: command tx timeout [ 81.008776][ T5860] Bluetooth: hci3: command tx timeout [ 81.008805][ T5860] Bluetooth: hci1: command tx timeout [ 81.031614][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.051038][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.065875][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.098531][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.139978][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.151277][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.224506][ T5956] program syz.2.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.587192][ T5924] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.756841][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 81.771078][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.782306][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.793538][ T5924] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 81.804031][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.807209][ T5858] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.823298][ T5924] usb 2-1: config 0 descriptor?? [ 81.983364][ T5858] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 81.994202][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.004487][ T5858] usb 1-1: Product: syz [ 82.009043][ T5858] usb 1-1: Manufacturer: syz [ 82.014529][ T5858] usb 1-1: SerialNumber: syz [ 82.022340][ T5858] usb 1-1: config 0 descriptor?? [ 82.034751][ T5858] ttusb_dec_send_command: command bulk message failed: error -22 [ 82.057130][ T5858] ttusb-dec 1-1:0.0: probe with driver ttusb-dec failed with error -22 [ 82.250307][ T5980] usb 1-1: USB disconnect, device number 2 [ 82.272361][ T5924] input: HID 041e:3100 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.0001/input/input5 [ 82.296110][ T5997] ======================================================= [ 82.296110][ T5997] WARNING: The mand mount option has been deprecated and [ 82.296110][ T5997] and is ignored by this kernel. Remove the mand [ 82.296110][ T5997] option from the mount to silence this warning. [ 82.296110][ T5997] ======================================================= [ 82.335668][ T5997] /dev/rnullb0: Can't open blockdev [ 82.390805][ T5924] creative-sb0540 0003:041E:3100.0001: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0 [ 82.416870][ T5858] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.464458][ T5924] usb 2-1: USB disconnect, device number 2 [ 82.478551][ T5999] fido_id[5999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 82.547031][ T5858] usb 3-1: device descriptor read/64, error -71 [ 82.787063][ T5858] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.917177][ T5860] Bluetooth: hci0: command tx timeout [ 82.922901][ T5858] usb 3-1: device descriptor read/64, error -71 [ 83.012773][ T6001] process 'syz.1.14' launched './file2' with NULL argv: empty string added [ 83.037085][ T5858] usb usb3-port1: attempt power cycle [ 83.077013][ T5860] Bluetooth: hci1: command tx timeout [ 83.082591][ T5860] Bluetooth: hci2: command tx timeout [ 83.088755][ T5186] Bluetooth: hci3: command tx timeout [ 83.194957][ T6010] /dev/rnullb0: Can't open blockdev [ 83.376906][ T5858] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.409992][ T5858] usb 3-1: device descriptor read/8, error -71 [ 83.666937][ T5858] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 83.688257][ T5858] usb 3-1: device descriptor read/8, error -71 [ 83.797182][ T5858] usb usb3-port1: unable to enumerate USB device [ 84.080179][ T6028] /dev/rnullb0: Can't open blockdev [ 84.212099][ T30] audit: type=1326 audit(1756218303.264:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.1.26" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bc5d8ebe9 code=0x0 [ 84.265850][ T6033] /dev/rnullb0: Can't open blockdev [ 84.997185][ T5860] Bluetooth: hci0: command tx timeout [ 85.157398][ T5860] Bluetooth: hci2: command tx timeout [ 85.158702][ T5186] Bluetooth: hci3: command tx timeout [ 85.167595][ T5860] Bluetooth: hci1: command tx timeout [ 85.231079][ T6040] /dev/rnullb0: Can't open blockdev [ 85.329247][ T6044] capability: warning: `syz.1.30' uses 32-bit capabilities (legacy support in use) [ 85.382202][ T6048] binder: 6047:6048 ioctl c0306201 200000000540 returned -14 [ 85.390576][ T6048] binder: 6047:6048 ioctl c0306201 2000000000c0 returned -14 [ 85.417222][ T6049] /dev/rnullb0: Can't open blockdev [ 85.438734][ T6052] fuse: Bad value for 'fd' [ 85.444106][ T6051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.34'. [ 85.444439][ T6052] /dev/rnullb0: Can't open blockdev [ 85.576945][ T5904] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.666600][ T6066] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿÿ [ 85.726840][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 85.733878][ T5904] usb 2-1: config 0 has an invalid interface number: 86 but max is 0 [ 85.743936][ T5904] usb 2-1: config 0 has no interface number 0 [ 85.751152][ T5904] usb 2-1: config 0 interface 86 has no altsetting 0 [ 85.763378][ T5904] usb 2-1: New USB device found, idVendor=0af0, idProduct=7801, bcdDevice=c6.25 [ 85.772826][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.781059][ T5904] usb 2-1: Product: syz [ 85.785625][ T5904] usb 2-1: Manufacturer: syz [ 85.791356][ T5904] usb 2-1: SerialNumber: syz [ 85.799873][ T5904] usb 2-1: config 0 descriptor?? [ 85.810814][ T5904] hso 2-1:0.86: Not our interface [ 85.957781][ T5858] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.014043][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.024046][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.034585][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.045532][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.121464][ T5858] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 86.131086][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.133578][ T5924] usb 2-1: USB disconnect, device number 3 [ 86.150202][ T5858] usb 1-1: config 0 descriptor?? [ 86.172011][ T5858] usb 1-1: Invalid firmware size=18. [ 86.215842][ T6075] libceph: resolve '4' (ret=-3): failed [ 86.223244][ T6075] /dev/rnullb0: Can't open blockdev [ 86.268502][ T6077] /dev/rnullb0: Can't open blockdev [ 86.546889][ T5858] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 86.699317][ T5858] usb 3-1: Using ep0 maxpacket: 16 [ 86.719702][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.732089][ T5858] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 86.754896][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.769990][ T6083] Malformed UNC in devname [ 86.769990][ T6083] [ 86.779779][ T6083] CIFS: VFS: Malformed UNC in devname [ 86.786548][ T5858] usb 3-1: config 0 descriptor?? [ 86.793655][ T6083] Malformed UNC in devname [ 86.793655][ T6083] [ 86.800952][ T6083] CIFS: VFS: Malformed UNC in devname [ 86.840008][ T6086] /dev/rnullb0: Can't open blockdev [ 87.006855][ T5924] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.160503][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 87.167887][ T5924] usb 2-1: config 0 has no interfaces? [ 87.175963][ T5924] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 87.185438][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.194073][ T5924] usb 2-1: Product: syz [ 87.198609][ T5924] usb 2-1: Manufacturer: syz [ 87.203673][ T5924] usb 2-1: SerialNumber: syz [ 87.210318][ T5924] usb 2-1: config 0 descriptor?? [ 87.217491][ T5858] playstation 0003:054C:0BA0.0002: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 87.412585][ T6079] /dev/rnullb0: Can't open blockdev [ 87.420379][ T5858] playstation 0003:054C:0BA0.0002: Failed to retrieve feature with reportID 18: -71 [ 87.433998][ T5858] playstation 0003:054C:0BA0.0002: Failed to retrieve DualShock4 pairing info: -71 [ 87.445779][ T5858] playstation 0003:054C:0BA0.0002: Failed to get MAC address from DualShock4 [ 87.454780][ T5924] usb 2-1: USB disconnect, device number 4 [ 87.463739][ T5858] playstation 0003:054C:0BA0.0002: Failed to create dualshock4. [ 87.474623][ T5858] playstation 0003:054C:0BA0.0002: probe with driver playstation failed with error -71 [ 87.514102][ T5858] usb 3-1: USB disconnect, device number 6 [ 87.921641][ T6100] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 88.089726][ T6106] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.450627][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 88.460311][ T6120] netlink: 'syz.2.56': attribute type 3 has an invalid length. [ 88.620957][ T5981] usb 1-1: USB disconnect, device number 3 [ 89.084885][ T6140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.62'. [ 89.095790][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.62'. [ 89.273724][ T30] audit: type=1326 audit(1756218308.324:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz.0.63" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f749058ebe9 code=0x0 [ 89.543213][ T6163] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.578923][ T6167] Zero length message leads to an empty skb [ 89.699352][ T6171] xt_policy: too many policy elements [ 89.752324][ T6174] /dev/rnullb0: Can't open blockdev [ 90.032546][ T6197] binder: 6196:6197 ioctl 4008f50a 200000000040 returned -22 [ 90.351365][ T6211] netlink: 68 bytes leftover after parsing attributes in process `syz.3.82'. [ 90.527030][ T5924] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 90.616899][ T5981] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.683924][ T5924] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.699854][ T5924] usb 1-1: config index 0 descriptor too short (expected 28898, got 92) [ 90.710384][ T5924] usb 1-1: config 117 has too many interfaces: 166, using maximum allowed: 32 [ 90.719631][ T5924] usb 1-1: config 117 has an invalid descriptor of length 0, skipping remainder of the config [ 90.731673][ T5924] usb 1-1: config 117 has 0 interfaces, different from the descriptor's value: 166 [ 90.758403][ T5924] usb 1-1: string descriptor 0 read error: -22 [ 90.764659][ T5924] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.776156][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.791965][ T5981] usb 4-1: config index 0 descriptor too short (expected 65069, got 45) [ 90.800534][ T5981] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 90.810086][ T6220] /dev/rnullb0: Can't open blockdev [ 90.813830][ T5981] usb 4-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 90.829016][ T5981] usb 4-1: config 0 has no interfaces? [ 90.834531][ T5981] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 90.843770][ T5981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.853406][ T5981] usb 4-1: config 0 descriptor?? [ 90.892123][ T6222] (syz.2.86,6222,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 90.900965][ T6222] (syz.2.86,6222,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 91.014391][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.035671][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.036620][ T6225] /dev/rnullb0: Can't open blockdev [ 91.082022][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.097372][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.118282][ T6227] tipc: Started in network mode [ 91.123298][ T6227] tipc: Node identity 2a13a174dfbc, cluster identity 4711 [ 91.131252][ T6227] tipc: Enabled bearer , priority 0 [ 91.145412][ T6227] kvm: pic: level sensitive irq not supported [ 91.166632][ T5981] usb 1-1: USB disconnect, device number 4 [ 91.271965][ T6226] tipc: Disabling bearer [ 91.336009][ T6231] capability: warning: `syz.1.89' uses deprecated v2 capabilities in a way that may be insecure [ 91.625101][ T6247] /dev/rnullb0: Can't open blockdev [ 91.636960][ T5858] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 91.675390][ T5860] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 91.781424][ T5858] usb 2-1: device descriptor read/64, error -71 [ 91.884900][ T6261] /dev/rnullb0: Can't open blockdev [ 91.933011][ T6263] 9pnet_virtio: no channels available for device /dev/loop2 [ 92.037325][ T5858] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 92.152428][ T6273] warning: `syz.2.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.167883][ T6273] /dev/rnullb0: Can't open blockdev [ 92.176864][ T5858] usb 2-1: device descriptor read/64, error -71 [ 92.219929][ T6277] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 92.228386][ T6277] /dev/rnullb0: Can't open blockdev [ 92.241664][ T6280] /dev/rnullb0: Can't open blockdev [ 92.289797][ T5858] usb usb2-port1: attempt power cycle [ 92.523744][ T1211] cfg80211: failed to load regulatory.db [ 92.636932][ T5858] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 92.658124][ T5858] usb 2-1: device descriptor read/8, error -71 [ 92.906869][ T5858] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 92.929852][ T5858] usb 2-1: device descriptor read/8, error -71 [ 93.037864][ T5858] usb usb2-port1: unable to enumerate USB device [ 93.161315][ T6290] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.169039][ T6290] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.179597][ T6290] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.187836][ T6290] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.194301][ T6290] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.204561][ T6290] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.215223][ T6290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.224001][ T6290] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.233242][ T6290] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.255091][ T6290] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.263122][ T6290] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.273835][ T6290] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.358185][ T5981] usb 4-1: USB disconnect, device number 2 [ 93.482390][ T6300] /dev/rnullb0: Can't open blockdev [ 94.385532][ T6310] QAT: failed to copy from user cfg_data. [ 94.421465][ T6313] program syz.0.112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.441625][ T5860] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.736871][ T1211] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.856940][ T5858] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.897681][ T1211] usb 4-1: Using ep0 maxpacket: 16 [ 94.905749][ T1211] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.914271][ T1211] usb 4-1: config 0 has no interface number 0 [ 94.924074][ T1211] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.935590][ T1211] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.947256][ T1211] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 94.956444][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.966472][ T1211] usb 4-1: config 0 descriptor?? [ 95.028741][ T5858] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 95.041135][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.054590][ T5858] usb 1-1: config 0 descriptor?? [ 95.071897][ T5858] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 95.249050][ T5186] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.255496][ T5860] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.269182][ T6322] netlink: 'syz.0.115': attribute type 3 has an invalid length. [ 95.278012][ T6322] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.115'. [ 95.326916][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.553021][ T6331] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.587412][ T5858] gspca_sunplus: reg_w_riv err -110 [ 95.594127][ T5858] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 95.842335][ T44] usb 1-1: USB disconnect, device number 5 [ 95.995536][ T6338] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 96.015690][ T6338] /dev/rnullb0: Can't open blockdev [ 96.517211][ T5860] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.191492][ T6354] /dev/rnullb0: Can't open blockdev [ 97.223733][ T6354] /dev/rnullb0: Can't open blockdev [ 97.267020][ T6361] netlink: 148 bytes leftover after parsing attributes in process `syz.1.126'. [ 97.298075][ T6363] netlink: 56 bytes leftover after parsing attributes in process `syz.0.127'. [ 97.326594][ T6363] KVM: debugfs: duplicate directory 6363-6 [ 97.340212][ T5860] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.346359][ T5186] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.396984][ T5186] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.569920][ T1211] usbhid 4-1:0.1: can't add hid device: -71 [ 97.576453][ T1211] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 97.594485][ T1211] usb 4-1: USB disconnect, device number 3 [ 98.098150][ T1211] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.386931][ T1211] usb 4-1: Using ep0 maxpacket: 16 [ 98.393715][ T1211] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 98.418423][ T1211] usb 4-1: config 1 has no interface number 0 [ 98.425717][ T6392] block nbd2: Attempted send on invalid socket [ 98.432431][ T1211] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 98.442984][ T6392] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.458566][ T1211] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 98.477125][ T6392] block nbd2: Attempted send on invalid socket [ 98.490050][ T6392] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.501694][ T1211] usb 4-1: config 1 interface 105 has no altsetting 0 [ 98.521695][ T1211] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 98.537914][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.546536][ T6392] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 98.557697][ T1211] usb 4-1: Product: syz [ 98.563028][ T1211] usb 4-1: Manufacturer: syz [ 98.576829][ T1211] usb 4-1: SerialNumber: syz [ 98.583921][ T6392] block nbd2: Attempted send on invalid socket [ 98.599736][ T6392] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.600128][ T6378] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.609960][ T5186] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.627842][ T6392] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 98.638666][ T6378] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.639586][ T6392] block nbd2: Attempted send on invalid socket [ 98.667484][ T6392] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.684899][ T6392] block nbd2: Attempted send on invalid socket [ 98.696891][ T6392] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.707434][ T6392] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 98.726980][ T6392] block nbd2: Attempted send on invalid socket [ 98.733451][ T6392] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.744053][ T6392] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 98.754680][ T6392] block nbd2: Attempted send on invalid socket [ 98.761318][ T6392] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.774445][ T6392] block nbd2: Attempted send on invalid socket [ 98.785295][ T6392] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.796013][ T6392] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 98.817580][ T6392] block nbd2: Attempted send on invalid socket [ 98.834919][ T6392] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.844863][ T6392] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 98.859686][ T6400] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.873405][ T6400] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.884343][ T6392] block nbd2: Attempted send on invalid socket [ 98.892992][ T6392] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.903393][ T6392] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 98.913601][ T6392] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 98.923857][ T6392] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 99.295512][ T1211] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 99.306844][ T5981] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 99.366082][ T1211] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 99.397636][ T5186] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.404084][ T5186] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.436889][ T1211] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 99.472131][ T1211] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a6:64:be:3e:0a:4d [ 99.486289][ T5186] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.494998][ T1211] usb 4-1: USB disconnect, device number 4 [ 99.501958][ T1211] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 99.568120][ T1211] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 99.586860][ T1211] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 99.597099][ T1211] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 99.695817][ T6415] netlink: 'syz.1.141': attribute type 29 has an invalid length. [ 99.735884][ T6415] netlink: 'syz.1.141': attribute type 29 has an invalid length. [ 99.959806][ T5186] block nbd1: Receive control failed (result -107) [ 100.089215][ T6420] nbd1: detected capacity change from 0 to 8589934592 [ 100.104357][ T6422] ------------[ cut here ]------------ [ 100.110288][ T6422] WARNING: fs/buffer.c:1125 at bdev_getblk+0x580/0x660, CPU#0: syz.1.142/6422 [ 100.119430][ T6422] Modules linked in: [ 100.123851][ T6422] CPU: 0 UID: 0 PID: 6422 Comm: syz.1.142 Not tainted syzkaller #0 PREEMPT(full) [ 100.133152][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.143300][ T6422] RIP: 0010:bdev_getblk+0x580/0x660 [ 100.148748][ T6422] Code: 26 fb ff ff e8 b1 77 78 ff 48 c7 c7 60 21 ba 8b 48 c7 c6 ae 71 ce 8d 4c 89 fa 4c 89 e9 e8 d8 4e df fe eb bd e8 91 77 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 100.168754][ T6422] RSP: 0018:ffffc90003cc76b0 EFLAGS: 00010293 [ 100.175066][ T6422] RAX: ffffffff8248573f RBX: ffff888148c26798 RCX: ffff88802730da00 [ 100.183156][ T6422] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 100.191225][ T6422] RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000000 [ 100.200153][ T6422] R10: 0000000000000406 R11: 0000000000000000 R12: ffff888148c270f0 [ 100.208761][ T6422] R13: ffff888148c26780 R14: 0000000000000200 R15: 1ffff11029184cf3 [ 100.216973][ T6422] FS: 00007f3bc6b3c6c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 100.226144][ T6422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.232854][ T6422] CR2: 0000000000000000 CR3: 00000000749ce000 CR4: 00000000003526f0 [ 100.240892][ T6422] Call Trace: [ 100.244201][ T6422] [ 100.247221][ T6422] ? blk_cgroup_bio_start+0x59d/0x640 [ 100.252638][ T6422] ? lock_release+0x4b/0x3e0 [ 100.257302][ T6422] ? blkg_tryget+0x20/0x250 [ 100.261934][ T6422] ? blkg_tryget+0x20/0x250 [ 100.266476][ T6422] __bread_gfp+0x89/0x3c0 [ 100.271009][ T6422] udf_read_tagged+0xad/0xe00 [ 100.275822][ T6422] ? submit_bio_noacct_nocheck+0x938/0xb50 [ 100.281771][ T6422] ? bio_associate_blkg+0x6d/0x230 [ 100.287008][ T6422] udf_check_anchor_block+0x99/0x550 [ 100.292428][ T6422] ? udf_get_last_block+0x1c6/0x360 [ 100.297742][ T6422] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 100.304309][ T6422] ? __bread_gfp+0x340/0x3c0 [ 100.309533][ T6422] udf_load_vrs+0x6e3/0xf20 [ 100.314135][ T6422] ? __pfx_udf_load_vrs+0x10/0x10 [ 100.319253][ T6422] ? udf_get_last_session+0x100/0x200 [ 100.324854][ T6422] ? __pfx_udf_get_last_session+0x10/0x10 [ 100.330701][ T6422] ? __raw_spin_lock_init+0x45/0x100 [ 100.336144][ T6422] udf_fill_super+0x5ad/0x17a0 [ 100.336177][ T6422] ? __pfx_udf_fill_super+0x10/0x10 [ 100.336198][ T6422] ? set_blocksize+0x21e/0x500 [ 100.336223][ T6422] ? sb_set_blocksize+0x104/0x180 [ 100.336247][ T6422] ? setup_bdev_super+0x4c1/0x5b0 [ 100.336270][ T6422] get_tree_bdev_flags+0x40b/0x4d0 [ 100.336290][ T6422] ? __pfx_udf_fill_super+0x10/0x10 [ 100.336311][ T6422] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 100.336337][ T6422] vfs_get_tree+0x8f/0x2b0 [ 100.336365][ T6422] do_new_mount+0x2a2/0xa30 [ 100.336392][ T6422] ? ns_capable+0x8a/0xf0 [ 100.336415][ T6422] ? __pfx_do_new_mount+0x10/0x10 [ 100.336438][ T6422] ? path_mount+0x61c/0xfe0 [ 100.336459][ T6422] ? user_path_at+0x44/0x60 [ 100.336495][ T6422] __se_sys_mount+0x317/0x410 [ 100.336522][ T6422] ? __pfx___se_sys_mount+0x10/0x10 [ 100.336557][ T6422] ? rcu_is_watching+0x15/0xb0 [ 100.336581][ T6422] ? __x64_sys_mount+0x20/0xc0 [ 100.336607][ T6422] do_syscall_64+0xfa/0xfa0 [ 100.336635][ T6422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.336657][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 100.336681][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.336701][ T6422] RIP: 0033:0x7f3bc5d8ebe9 [ 100.336783][ T6422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.336801][ T6422] RSP: 002b:00007f3bc6b3c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.336825][ T6422] RAX: ffffffffffffffda RBX: 00007f3bc5fb6180 RCX: 00007f3bc5d8ebe9 [ 100.336840][ T6422] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 100.336855][ T6422] RBP: 00007f3bc5e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 100.336868][ T6422] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 100.336881][ T6422] R13: 00007f3bc5fb6218 R14: 00007f3bc5fb6180 R15: 00007ffeac36bca8 [ 100.336904][ T6422] [ 100.336915][ T6422] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.336931][ T6422] CPU: 0 UID: 0 PID: 6422 Comm: syz.1.142 Not tainted syzkaller #0 PREEMPT(full) [ 100.336953][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.336965][ T6422] Call Trace: [ 100.336974][ T6422] [ 100.336982][ T6422] dump_stack_lvl+0x99/0x250 [ 100.337016][ T6422] ? __asan_memcpy+0x40/0x70 [ 100.337043][ T6422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.337073][ T6422] ? __pfx__printk+0x10/0x10 [ 100.337109][ T6422] vpanic+0x281/0x750 [ 100.337133][ T6422] ? __pfx__printk+0x10/0x10 [ 100.337161][ T6422] ? __pfx_vpanic+0x10/0x10 [ 100.337185][ T6422] ? is_bpf_text_address+0x292/0x2b0 [ 100.337206][ T6422] ? is_bpf_text_address+0x26/0x2b0 [ 100.337228][ T6422] panic+0xb9/0xc0 [ 100.337252][ T6422] ? __pfx_panic+0x10/0x10 [ 100.337282][ T6422] __warn+0x334/0x4c0 [ 100.337305][ T6422] ? bdev_getblk+0x580/0x660 [ 100.337328][ T6422] ? bdev_getblk+0x580/0x660 [ 100.337349][ T6422] report_bug+0x2be/0x4f0 [ 100.337368][ T6422] ? bdev_getblk+0x580/0x660 [ 100.337390][ T6422] ? bdev_getblk+0x580/0x660 [ 100.337410][ T6422] ? bdev_getblk+0x582/0x660 [ 100.337431][ T6422] handle_bug+0x84/0x160 [ 100.337446][ T6422] exc_invalid_op+0x1a/0x50 [ 100.337459][ T6422] asm_exc_invalid_op+0x1a/0x20 [ 100.337474][ T6422] RIP: 0010:bdev_getblk+0x580/0x660 [ 100.337497][ T6422] Code: 26 fb ff ff e8 b1 77 78 ff 48 c7 c7 60 21 ba 8b 48 c7 c6 ae 71 ce 8d 4c 89 fa 4c 89 e9 e8 d8 4e df fe eb bd e8 91 77 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 100.337510][ T6422] RSP: 0018:ffffc90003cc76b0 EFLAGS: 00010293 [ 100.337528][ T6422] RAX: ffffffff8248573f RBX: ffff888148c26798 RCX: ffff88802730da00 [ 100.337550][ T6422] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 100.337560][ T6422] RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000000 [ 100.337570][ T6422] R10: 0000000000000406 R11: 0000000000000000 R12: ffff888148c270f0 [ 100.337580][ T6422] R13: ffff888148c26780 R14: 0000000000000200 R15: 1ffff11029184cf3 [ 100.337595][ T6422] ? bdev_getblk+0x57f/0x660 [ 100.337621][ T6422] ? blk_cgroup_bio_start+0x59d/0x640 [ 100.337642][ T6422] ? lock_release+0x4b/0x3e0 [ 100.337657][ T6422] ? blkg_tryget+0x20/0x250 [ 100.337675][ T6422] ? blkg_tryget+0x20/0x250 [ 100.337696][ T6422] __bread_gfp+0x89/0x3c0 [ 100.337718][ T6422] udf_read_tagged+0xad/0xe00 [ 100.337742][ T6422] ? submit_bio_noacct_nocheck+0x938/0xb50 [ 100.337762][ T6422] ? bio_associate_blkg+0x6d/0x230 [ 100.337785][ T6422] udf_check_anchor_block+0x99/0x550 [ 100.337807][ T6422] ? udf_get_last_block+0x1c6/0x360 [ 100.337823][ T6422] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 100.337845][ T6422] ? __bread_gfp+0x340/0x3c0 [ 100.337867][ T6422] udf_load_vrs+0x6e3/0xf20 [ 100.337891][ T6422] ? __pfx_udf_load_vrs+0x10/0x10 [ 100.337907][ T6422] ? udf_get_last_session+0x100/0x200 [ 100.337922][ T6422] ? __pfx_udf_get_last_session+0x10/0x10 [ 100.337938][ T6422] ? __raw_spin_lock_init+0x45/0x100 [ 100.337962][ T6422] udf_fill_super+0x5ad/0x17a0 [ 100.337983][ T6422] ? __pfx_udf_fill_super+0x10/0x10 [ 100.338000][ T6422] ? set_blocksize+0x21e/0x500 [ 100.338022][ T6422] ? sb_set_blocksize+0x104/0x180 [ 100.338041][ T6422] ? setup_bdev_super+0x4c1/0x5b0 [ 100.338059][ T6422] get_tree_bdev_flags+0x40b/0x4d0 [ 100.338077][ T6422] ? __pfx_udf_fill_super+0x10/0x10 [ 100.338094][ T6422] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 100.338116][ T6422] vfs_get_tree+0x8f/0x2b0 [ 100.338133][ T6422] do_new_mount+0x2a2/0xa30 [ 100.338153][ T6422] ? ns_capable+0x8a/0xf0 [ 100.338171][ T6422] ? __pfx_do_new_mount+0x10/0x10 [ 100.338188][ T6422] ? path_mount+0x61c/0xfe0 [ 100.338205][ T6422] ? user_path_at+0x44/0x60 [ 100.338232][ T6422] __se_sys_mount+0x317/0x410 [ 100.338253][ T6422] ? __pfx___se_sys_mount+0x10/0x10 [ 100.338274][ T6422] ? rcu_is_watching+0x15/0xb0 [ 100.338291][ T6422] ? __x64_sys_mount+0x20/0xc0 [ 100.338311][ T6422] do_syscall_64+0xfa/0xfa0 [ 100.338333][ T6422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.338349][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 100.338367][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.338382][ T6422] RIP: 0033:0x7f3bc5d8ebe9 [ 100.338395][ T6422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.338408][ T6422] RSP: 002b:00007f3bc6b3c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.338424][ T6422] RAX: ffffffffffffffda RBX: 00007f3bc5fb6180 RCX: 00007f3bc5d8ebe9 [ 100.338436][ T6422] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 100.338447][ T6422] RBP: 00007f3bc5e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 100.338457][ T6422] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 100.338467][ T6422] R13: 00007f3bc5fb6218 R14: 00007f3bc5fb6180 R15: 00007ffeac36bca8 [ 100.338486][ T6422] [ 100.338856][ T6422] Kernel Offset: disabled