last executing test programs: 6.073800247s ago: executing program 3 (id=419): setreuid(0x0, 0xee01) r0 = msgget$private(0x0, 0x20) msgctl$IPC_STAT(r0, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000040)=0x1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000340)=""/137, 0x89}], 0x1, 0xc, 0x0) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180)={r7, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e21, @loopback}}, 0x4, 0x9, 0x3, 0x1, 0x0, 0x81, 0x81}, &(0x7f0000000280)=0x9c) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000080)={0x1, {{0xa, 0x4e21, 0x89, @private2, 0x1}}}, 0x88) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RFLUSH(r8, &(0x7f0000000180)={0x7, 0x6d, 0x1}, 0x7) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) write(r2, &(0x7f0000000400)="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", 0x1f000) 6.062492628s ago: executing program 3 (id=420): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x109, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040563e, &(0x7f0000000040)={0x4}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r6, 0x0, 0x0, r7], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r8, 0x2000) 5.886989942s ago: executing program 3 (id=421): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0r0, {0x7}}, './file0\x00'}) fchdir(r1) (async) r2 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="c2fa503213c93547b7fae8d0936643fe09e763591ae76f15995663af0f51421279886a9389c5a3729607627bbbfdd8f90ab4d8", 0x33, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="1e7ac6d799547d9d923db927d62aa837f06c0b6e08a444a6500dbce8057cf9cc5d61482ea40ada49d25fc184adec0f3e9ddad261c6c47c40325ca259f114c82be800346411bfe8e72a56", 0x4a, 0xffffffffffffffff) r4 = open(&(0x7f0000000240)='./file0\x00', 0x80000, 0x40) poll(&(0x7f0000000280)=[{r4, 0x9430}, {r4, 0x2000}, {r4, 0x2}, {r1, 0xc304}, {r0, 0x41}], 0x5, 0x8) (async) syslog(0x0, &(0x7f00000002c0)=""/74, 0x4a) r5 = add_key(&(0x7f0000000340)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="009861d6b85d6a401fed5b9da0404d5560d04909164372e05989de077c5f90a83e93feaa7049eb48b3b99fa3d0e29349f8b8651d77de95a3f4efa1c8b0993da26dbaa5a01b796aa8a09783c7034ac862f0097ecd7e4d1ad4807202d86773e83671a1107121f7e5558f4c03208a77e9c570835d8a33b45fa954c8998244e2a4d182420a4ab337", 0x86, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000480)='rxrpc\x00', 0x0) (async) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000004c0)={r2, 0xe9, 0xc1}, &(0x7f0000000500)={'enc=', 'oaep', ' hash=', {'cmac(khazad-generic)\x00'}}, &(0x7f0000000580)="49ccad8e6c2f94f0b54eefc1b4d4d0359cce53497776b403a9857e59cf259b8b5885593623b2e2f715564a615e3f4e00f060d0eab97254abc5896491975b413f2b9aeef50bb965ec50760d4b01d24a43936c890500058f75a40b6887eb5bf370203f80f003aca75c2b8218f044895de99c1c6f7e5f8609a88c58c83c9abdf1d20e72b5ac19d5e96222ba3437ea9ac5f54d911ebe5bff7aee1b425035048067faec2818c810a86c293758c3996ad109b1b9ae877ed385900fad1c1e67fad7b3321cf755e8e0a49a24e498e0caefa334499b1a25f9604b98d9dd4965646615ff757059312ffe7d241a9f", &(0x7f0000000680)=""/193) (async) keyctl$unlink(0x9, r3, r5) (async, rerun: 32) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000780)=0x9, 0x2, 0x6) (rerun: 32) r6 = syz_usb_connect(0x1, 0xd87, &(0x7f00000007c0)={{0x12, 0x1, 0x688, 0x7e, 0xae, 0xc9, 0x10, 0x46d, 0x8b5, 0x8a47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd75, 0x4, 0x6, 0x2, 0xc0, 0x36, [{{0x9, 0x4, 0xde, 0xaf, 0x10, 0x82, 0x77, 0x58, 0xd, [@hid_hid={0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0xbcc}}], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3}]}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x1, 0x5, 0x4}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x0, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x7}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x3, 0x8, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x8, 0x4d, 0x88, [@generic={0x49, 0x3, "c23d86a49f5fe952752944d783f037286b0b68c716d40ac24b2b8ab11600777aeea1d40b4c2bf18f7d060c78438b35169b9a4e7759cdcd53ce6e73d826c816fe4178d53e616674"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0xd4, 0x7, 0x7}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x4, 0x4}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x9, 0x9, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0xd88e}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x3, 0x7, 0x1, [@generic={0xd8, 0x6, "6b0646b5206a7675a8ae5d874ee9ac363356ed415b1230e8dbe92ef140c0eae3c844416e1d2048fea66819fbce488de197fcbde087342db6ee8df09c9d1f2cd9ae489022bbe3fdb40ecbc40af8fb99e459888bae8d1c470e28db5a76412dcab8d62e1d8e0911799b65fdbae57a9e8c82ead8d94b98d297112fc63d5cc1961d891752d08a07ee51c22718ef8176448b7b6269bb285e31722b25dfccdbeaf9120bf2f67aac51651814ed6a42f45efaeee8c2289cb044189c0627d78c2f47f277316a8be3e1ca40797e614f936ccc76eb757698fe4ed0bd"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xfff8}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x9, 0x0, 0xfa}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x3, 0x1b, 0x6}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x53, 0xe, 0x7d, [@generic={0xc4, 0x23, "52a76b367c88e00186d60aea1d9c3c0956db2382cb06c7cb4e003f045ca438f0c7d15a6ec9117303deffd8459a481e0dc1a73b2d534804f59025cd7343e110f44a97f3a5f4f03efacbc0a27eac9a2eb96785e419bf91ab93deee534ed0b7ea4a79c635dde45eff3bbf8af0cb914bdbf3253a249fa919a74dc9f5e984ddc2a01e858baf5d2cca0f52dc2eba9521df9dacdf791943ef7fa8a58ccfb739737257ebd1e03046efbe5a86f555601c0ddace8bbcd7c4437b2fe84486e4e1e6340bd2c52b67"}, @generic={0x2f, 0x8, "6d7e7ed27f86660e5f80c4b36004139a25257269640450d3d06d03493a41a8bd5f3d2ff25d93fde12669e2fbf0"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x7, 0x6, 0xda, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x74, 0x1}]}}, {{0x9, 0x5, 0x80, 0xc, 0x0, 0x53, 0x5, 0x45, [@generic={0x35, 0x2, "8508f49cfdf5eec8f9713db401a7c8a2252f43ec0d344b5577cd649f0f287c31964cef512d2852e2f87d3c8df529b007f80ff0"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x57, 0x4}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0xcf, 0x1b, 0x4}}]}}, {{0x9, 0x4, 0x9a, 0x9, 0x6, 0x35, 0xc7, 0x6e, 0x5, [@hid_hid={0x9, 0x21, 0x8, 0x32, 0x1, {0x22, 0xbf0}}, @uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xf, 0x6, 0x8, "3c78e763"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x3, 0x1001}]}], [{{0x9, 0x5, 0xc, 0x4, 0x38, 0xa1, 0x6, 0x6, [@generic={0x79, 0x3, "13deb99a31f81ed595c080076f94f0256e4849b16c3b1c4828d268209c800f952535eb764760a3a0b86ae03d2ea5971edd6351ba174851c38e8eea5ac385c7422080ba229fc43f359ceb30259bd4c3b00dc80ab1181ce70b0971ed2bf66f97827de9be382648f280e1c60bc1cb933958ac6d1137f31f07"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0xfc, 0xff}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x1, 0x6, 0x2}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x42, 0x6, 0xd1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x101}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0xe, 0x6, 0x0, [@generic={0x8b, 0x10, "4cba17f759e53df5fbb2682e805ee68ec747749e320d7b164022b9663d39dc22ef1823dd9246139084baee69304e370f70e18c98c121f5e30de36c67498ebbdf1e75a8ea98367dea9d93f8c8c003079c1afc55068fe94cab189a695c8dbc87d3ab12111a1fc52f0dd6efbcc9c4a329658573653e1fbaf03f5484b766d9067dd1e810a37621d5195d18"}, @generic={0x33, 0x7, "03fe05ed2cae5ff9334ab37b20fe0b67363d75a73af66e7f3295fd7380c437dbf5e76f01adaf9ba1307a1f93806100b019"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0xe, 0x0, 0xe9, [@generic={0xc, 0x8, "9188e08e603461c34e27"}, @generic={0xe0, 0x23, "190124984f1e7d14591dcfdbb6061eedd119fd795caa8331997528b6765b688d0207ba18467ec844f5e2e3c31118e68fc1f8afedf341ea776c1cf9a86ee385c3e473b9667d1cc81265ce7f1518effaa5a19999b8a7a0096ecc3e6aa4038db9e6724fe5cc699023d7121e133937e96c23e2bdbf215971bebf7e99ee141e6161e3808db7408aae90e3487e29af483d2e1c27fd8b0aaf68b65772048d3da4578fa87b27082e1b1aecf935204c252aba4afe9de8c9a05c8568281bbc7a41fe2836cb2c314813e906774b98aec80c87039b56e201984f8b5ad29863bfdd5c84ee"}]}}]}}, {{0x9, 0x4, 0x54, 0x8, 0xa, 0x38, 0xc3, 0x4c, 0x7f, [@generic={0x16, 0x2, "7de02d228a7ff894ef83754d78d4d1ea284842a4"}, @hid_hid={0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x112}}], [{{0x9, 0x5, 0xf, 0x0, 0x400, 0x9, 0x9, 0xab, [@generic={0xf5, 0xc, "08bdb409fd1874fb8ffe353a96c3d46ca9e2377e61021ff3b85e5cefc2ed54b0b000854764c7f0d2d383ec9f743a97596a9c9e9eee5240cd9f75234845d1d5e2ffecb8d24f0254dc7d4eb098f3f16f43d84bd085c65662951691cbe9fb457333f5489e34410f988605645a974496245d35aa0438a44ebab582b776d2d149fbdaba7c4b9735f2ac360ac3cc6031b2a4ae5209c0688bed337f7361091827ca113bc5ac30ebf57bc85f287c5cd155341cfb8d70895cbdc749e6534afb4668048af75a7dfcf65dfc13c31ffdffbccccb785cbd7a818185ca78bcc3792ba3d5b77908d57da397619966828f0d55ee04ab37b5db13a4"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xc, 0x21, 0x0, [@generic={0xa7, 0x8, "e4d9124f3bbb5c238a26f7919b31ddd6fad64b2e08bf67b15a33311fbc8c7d672e3b11efa62e53ddd733e09481d11552e58505e440f5bec924e96324ef49abc3c00312950bad57ec60a05e3654466b7a8511376c8394fd1bd3ffb66a72abb49b13be4bcde629628eee58821657b887f19feedb598f916a544b793bc9312406ca986ba74cede9f22e5ce3ec09e6b59c7cbda17d3015b3d5c0a47c04a2f083b96db6b824d8f9"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0xf, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x8, 0xfd, 0xfe, [@generic={0x15, 0x23, "0d070133ba128871727b033dd4d252883ab6ec"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x440, 0x2, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x9, 0x9, 0x8, [@generic={0x14, 0x2, "ee86c786d8f3603c63443bc1f63da959df19"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x38, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x3, 0xd0, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x7b7a36e34e876f8b, 0x80, 0xfffb}]}}, {{0x9, 0x5, 0xd, 0x8, 0xa0dbe3d542e64ff7, 0x5, 0x8, 0x0, [@generic={0x8, 0xa, "ccb193930c82"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x9, 0x7, 0xf1, [@generic={0xa9, 0x4, "486e7e2959192479ac65a7c7d7d606885e1aca84cf280fdaab8a114eb31066c2664c9310b2c36fe286574e7da8df643a558387cc43299911c433b6bc6f9b9e461406419b8123feda1e6bedfb813ca82815d4467864b503a427c629bbf1164a34fb241009b9c189a0e14d7803a6b0cbadc32fef04ed5b5b5b000b2179437deb6bac6ca77716e92e9853a4283ad47848c2862bde0f4795498d6cd863bef9cbc3d0c545f50e0e73a4"}, @generic={0x6b, 0x10, "1d7e1ddf3692d1aca9f166300ac695295f5d067000ab4d7f57d89f938bff0f2aa6b37c05a3e4d1c02015562d8406a4df8becdffa8caaae774e48b536848f3c8d55d78ba4cd19a55c123b955c61382638892f6767c822e328613a4f70b4cd355e91ab129a6c3e387b87"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x2, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}, @generic={0x74, 0x2, "e60c077294e3633d55e20160784b444621984fc3edf57f69e3ea1e15e0d39f246e41da062b9cc3c0343c88f7585270d6dab0d35e3cc202f57511b80869fc27c1c9538ef67f11669cb0b5714705649e19b30ab9c4d437ee619618258b989b3233ef9cb2c63f4fe65422c01311dae08770ed43"}]}}]}}, {{0x9, 0x4, 0x76, 0x3, 0xf, 0xff, 0xff, 0x30, 0x1, [], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x1e, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7fff}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x9, 0xf8}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x9, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x5}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x1, 0x8, 0x40}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x80, 0x0, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x8, 0x1, 0x2}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x5, 0x3, 0x4, [@generic={0xe7, 0x60, "0f709fe257621b168eb769fcca0b3d8494b70a65835f00d85ac31a6fcec65ed8499e0812b03d035791221e32088566e3ba4b44403f1ded4e32b67a7c465e86e4987e2fa55cf96a00c257f36a11a02c9773861b2cbe1f2b8a3e8232af4e05f34abe21813cd8d0ca2c1a6ee4168aebd0ae9deaea953c9a5d4f1681a0ed4865a0411a21e23f7bb2602ac6f5a73a6ceff1dfa7ff114fbfd1205a99d4a54215f2da26780f6674c8803dfef811b6aedb893a924c01c6510599f13ededdaba0e70929c3ddb40fb25ea0f7e7e70c9e0df297e3e042922197725e637d7ed20f51eeb4f53d8a47782f99"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x8, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5}, @generic={0x79, 0x23, "71da354928526ae8fd198c647cde4405b5c06f61c494ab4c6f37472dd4e471586cbb067b5f551b1fa45e3b75d456592d129c836fb4187df49cb6bc527a8791ad054b4e34e13f581e312c1d8271e9c6910604e7f96e0046649e1c8408825b6ffa0162281d7be49025a8f64b75e8c8e15b50747f5a4dd1e2"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x2, 0x0, 0x92, [@generic={0x65, 0x9, "2fa215d4dcafd6352b08dc1f19221d073f81432883c7386a87d360da622e625fba11c4dcef1680b742e13eea9899a677ad4d95eddcb17df48c902156e9ccd29d4392abd488144be75f5055375305ed96f64cb009c9bec55bff4154716812596a99384c"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x8, 0xfb, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0xf6, 0xfff8}]}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x0, 0x7, 0x8}}, {{0x9, 0x5, 0x8, 0x10, 0x1ff, 0x4, 0x80, 0x4, [@generic={0x17, 0x4, "a9ca4ce60eb0b494a8e8e84e56a73d60e9c5a6c424"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xd5af}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x9, 0x5}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0xa6, 0x9, 0x5, [@generic={0x102, 0xd, "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"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x9, 0x7f, 0x3, [@generic={0x3f, 0x0, "4dcb8d0223cbaeb476cd831afa9ec640f426737090771a187089fd067d63ad27aeeb8aecfeef5d90b797b69885220823d44138533aaf7916f8912da5b6"}]}}]}}]}}]}}, &(0x7f00000018c0)={0xa, &(0x7f0000001580)={0xa, 0x6, 0x110, 0x5, 0x84, 0xa8, 0x8, 0xd2}, 0x89, &(0x7f00000015c0)={0x5, 0xf, 0x89, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x4, 0x5}, @ptm_cap={0x3}, @generic={0x59, 0x10, 0x3, "9a2fa4696762ecb0b48b502cb4525ea4199d188c06bdb521c7f705cfddfb217aa0b5967665e330f33c4fe8f51b6d4403b396359a82ed952e519334b49f1984d77e053184cc27a1a825da903c263244ba3ab3696dd630"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xe, 0x6, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "b71e90d295367e64c4f23708d411c409"}]}, 0x7, [{0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x4001}}, {0x2c, &(0x7f00000016c0)=@string={0x2c, 0x3, "25ccc5b4e66fb6d42b3062e51e7bbbad2d4a5f325387e9606977e0a8d8ac685b619d53d66cad92a381c5"}}, {0x1d, &(0x7f0000001700)=@string={0x1d, 0x3, "ba71975c00ccfac49f4fe75db52506baba445908d6fb919907f1af"}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x2c47}}, {0x1b, &(0x7f0000001780)=@string={0x1b, 0x3, "c698d2176f53f49c47b04b154589959d254d7c8fd49eef6a64"}}, {0x1c, &(0x7f00000017c0)=@string={0x1c, 0x3, "82732e2fd1750a50401454346bf7fdaeb8b0712bc681671deaf5"}}, {0xa8, &(0x7f0000001800)=@string={0xa8, 0x3, "ab8c4ca397ec12cf79283cd8bab8ed4ff9becf6f3fdaec23cf1f771eab0a9b2b8781c074cbc30344cd8dcf0dbb07d2b35b281056f1f0db6b748a99e3759e0421c28df76cb15f3b28c4c2a0696492d13d5adf3812025c291840daa8c8ffe0702b8530c58b5b48c789689e32371561b1e8d3b3b75a1c4970b0aa0571c440a59a41a87e42c7416ce5cbca2a76d5b4ee6c9bac568d2336df7c97f19daca1b817f2558080cfe8d6b7"}}]}) open(&(0x7f0000001940)='./file0\x00', 0x200000, 0x0) (async) syz_usb_control_io$uac1(r6, &(0x7f0000001a80)={0x14, &(0x7f0000001980)={0x0, 0x30, 0x9, {0x9, 0x31, "0aa4636a56d280"}}, &(0x7f00000019c0)={0x0, 0x3, 0x95, @string={0x95, 0x3, "0e4515e80e619ae240e4f1c3c3c0b0995bb719e21d1599515ba7156086ae17fd4606cf94576297ceeffd1d67ddce915fd9b6bd10555a4b04288608eb5cde298a0ee98cfbce97e06a8780de0fcf74ab08159b0dc61c99ae499a5aa3702c6aa6b93e84990c338705b9cc2af40a7de1292aab61da7a6de11de407982248d5a10bf4b6dcb94d88ecab9fe3eca938f7ac05d609fa5b"}}}, &(0x7f0000001d00)={0x44, &(0x7f0000001ac0)={0x40, 0x12, 0x68, "465711a69dd81b176ef20e85b647e05076be5f42f3728b8ec093de6ff3632e8e70607293b5fdb4d00b3718b731664f0f2d7f36ef95561a72b7d7bde87c80bdafb61cb13c4910a920c638e31e3691c49a96f2910ba22a094c044e6bdde800ad18a00ae7694db27d0f"}, &(0x7f0000001b40)={0x0, 0xa, 0x1}, &(0x7f0000001b80)={0x0, 0x8, 0x1}, &(0x7f0000001bc0)={0x20, 0x81, 0x3, "18122f"}, &(0x7f0000001c00)={0x20, 0x82, 0x2, "c38c"}, &(0x7f0000001c40)={0x20, 0x83, 0x1, "01"}, &(0x7f0000001c80)={0x20, 0x84, 0x4, "0b15eb6f"}, &(0x7f0000001cc0)={0x20, 0x85, 0x3, "964ef8"}}) (async) keyctl$search(0xa, r5, &(0x7f0000001d80)='pkcs7_test\x00', &(0x7f0000001dc0)={'syz', 0x1}, r5) (async) r7 = add_key$fscrypt_v1(&(0x7f0000001e00), &(0x7f0000001e40)={'fscrypt:', @auto=[0x30, 0x65, 0x36, 0x66, 0x61, 0x64, 0x33, 0x31, 0x38, 0x0, 0x65, 0x63, 0x39, 0x34, 0x38, 0x37]}, &(0x7f0000001e80)={0x0, "0e23c6955cc7cb7df5b405f65f1b91057dd20794d09a228017015ee359f9002c6e5fe3e9f12bd27933eb5c6464b6ff83fa72f21998b826cef8d5f343d110dded", 0x3f}, 0x48, r5) (async, rerun: 32) syslog(0x3, &(0x7f0000001f00)=""/30, 0x1e) (async, rerun: 32) r8 = add_key$keyring(&(0x7f0000001f40), &(0x7f0000001f80)={'syz', 0x0}, 0x0, 0x0, r5) (async, rerun: 64) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) (rerun: 64) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000001fc0), 0x18880, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000002000)={0x73622a85, 0x100}) (async) keyctl$instantiate(0xc, r7, &(0x7f0000002040)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'fscrypt:'}, 0x20, r5) (async) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002080), 0x400c00, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r10, 0x40096100, &(0x7f0000002340)={{&(0x7f00000022c0)={'GENERAL\x00', {}, {&(0x7f0000002240)={'KERNEL\x00', {&(0x7f0000002180)=@adf_dec={@format={'Dc', '4', 'RingAsymRx\x00'}, {0x9}, {&(0x7f00000020c0)=@adf_hex={@normal='NumberDcInstances\x00', {0x40}}}}}}}}}, 0xa8}) (async) renameat2(r9, &(0x7f0000002380)='./file0\x00', r4, &(0x7f00000023c0)='./file0\x00', 0x3) request_key(&(0x7f0000002400)='id_legacy\x00', &(0x7f0000002440)={'syz', 0x1}, &(0x7f0000002480)='trusted:', r8) 4.813710718s ago: executing program 3 (id=431): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000300)={0x5, 0x7, 0x3, 0x4008, 0x3f3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c8001a"], 0x7) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x8840, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x626, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000008c0)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000640)={0x1, 0x1, 0x8, 0x2, r4}, 0x10) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="12010122957f4b08ed04971f08d8010203010902220011be7ca72114d706900809", @ANYRESOCT=r2, @ANYRES32=r2, @ANYRESDEC=r3], &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0}) r5 = memfd_secret(0x80000) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) modify_ldt$write(0x1, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000180)=0x4) fcntl$lock(r5, 0x5, &(0x7f0000000d00)={0x2, 0x0, 0x200, 0x4}) r7 = getpid() ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000680)={'\x00', 0xdeb, 0x2a1, 0x9, 0x8, 0x2, r7}) ioctl$BTRFS_IOC_INO_PATHS(r6, 0xc0389423, &(0x7f00000001c0)={0x8, 0x38, [0x8, 0x6, 0x5, 0x100], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$swradio(0x0, 0x0, 0x2) pipe2(0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24008094) 4.479497567s ago: executing program 2 (id=438): socket(0x1d, 0x2, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) creat(&(0x7f0000001380)='./file0\x00', 0x12c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000053c0)='./bus\x00', 0x364) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 4.379229274s ago: executing program 2 (id=439): r0 = syz_io_uring_complete(0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236", 0xc1}], 0x1) close_range(r1, r1, 0x0) 4.293687419s ago: executing program 2 (id=440): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000005a"], 0x18}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000) recvmmsg(r8, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000008c0)=""/184, 0xb8}, {&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f0000000740)=""/41, 0x29}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f00000006c0)=""/49, 0x31}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}], 0x4, 0x4122, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x0) read$dsp(r9, &(0x7f0000000080)=""/65, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1.191895414s ago: executing program 1 (id=470): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x19, 0x17, 0xa1, 0x8, 0x10b8, 0xbb9, 0x5629, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x5, [{{0x9, 0x4, 0xc9, 0x0, 0x0, 0x7f, 0x2e, 0x15, 0xfc}}]}}]}}, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f0000000740)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x173}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4081, 0x564}, {&(0x7f0000000400)=""/106, 0x2f}, {&(0x7f00000006c0)=""/66, 0x7}, {&(0x7f0000000200)=""/77, 0x65f}, {&(0x7f0000000540)=""/166, 0x4a}, {&(0x7f0000000100)=""/10, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}, 0x1}], 0x4000000000003b4, 0x12022, &(0x7f0000000080)={0x77359400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000) 902.259317ms ago: executing program 0 (id=471): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='./cgroup\x00', 0x40000, 0x35) read$FUSE(r1, &(0x7f0000002a40)={0x2020}, 0x2020) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x7893) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 833.790907ms ago: executing program 0 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) (async) mount(&(0x7f00000005c0)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x110400, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x20, 0x70bd2b, 0x40000002, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xffff36f9}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000d1}, 0x2000c000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}}, [@migrate={0x50, 0x11, [{@in=@private=0xa010102, @in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in6=@empty, 0xff, 0x2, 0x0, 0x3502, 0x2, 0xa}]}]}, 0xa0}}, 0x0) (async) recvfrom$inet6(r1, &(0x7f0000000000)=""/45, 0x2d, 0x10100, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r8 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r8, &(0x7f0000000300)={0x14, &(0x7f0000000240)={0x40, 0x23, 0x93, {0x93, 0x22, "dd5db529ab40dbedff0ee7b80d853f9b70e696217b7d7b679b8e520749e3b7c25ccc95891e0063ae4e97a61ef304f7362ba40aa1a0ac12d46f083490e02fc13b6ca644a521ec5fb2f00e327a012a3afc7896b0a1a584cbe07559b7d3fd56a0b8b5010a1b22da762446164086ac79181521bf8fa4ded59698a01326caee85f8876801d3b3b053450868764695c1d4cc996d"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}}, &(0x7f0000000580)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="008aa5000000335cd73098f41f54c59c0eb48a037de2499b02a80f7d4df567231da110c6e1d1264e710c12ee1cf49378afd068aad7545dea231e6f004c872ac8826850643cfdaea93f7ba77d0df3d06590c6889c7b125a4f6d57d4ffaa2af10c1eafff2c9d4676ff8aece0e81c36d07c7364379c24e788baba258e154cbee9979db98ced65953331fe67317761969470640e31c685ed627a0af1de08a1579c4da8b187"], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000480)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "ce7e5b46c346632dd2c9f4b8aa72be0184a7cb1dbda7356f3b87dbd0823efe96a67a2ad3b169cdd884a607c099dff9"}}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r10, 0x40485404, &(0x7f0000000040)={{0x1}}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x44, r9, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PMKID={0x0, 0x55, "a46fb6d31eb9c1a2f8e0094ca2104049"}, @NL80211_ATTR_MAC={0x3b}, @NL80211_ATTR_FILS_CACHE_ID={0x0, 0xfd, 0x1b}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000800}, 0x8000) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) 830.645202ms ago: executing program 0 (id=473): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r5, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="4d00330040bc01000802110000000000000000000250505050509400ac0146c0000f9db4a84f2beb2f4ecb945a20a904b02d1a00080010000000000000000300010008000000000406000000090000000600cd000000000004008e0008005700961200ca"], 0x88}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x24008080) (async) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCDELRT(r6, 0x890c, &(0x7f0000000540)={@default, @null, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast]}) (async) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r7) (async) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd69b300042e010203010902120001000000000904"], 0x0) (async, rerun: 32) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000200)="0fc8246fa50a628d09c0ab8d94de13b3160401fdf50946446987e12b3717b1218ddc3a3974b1cf0ed73bc8862a19993fe3c5db7ffe2c977b527c5e67692e4d802b862207c7412350813bcfdd9206fc3acb1b88ceb93cab9da2f983855fb34ff2676d72d4eb9bbcb75981d398856a7b3c607b90e4860e994d923662", 0x7b) (async, rerun: 32) ioctl$EVIOCRMFF(r7, 0x550c, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) (async) syz_usb_control_io$uac1(r8, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r8, 0x0, 0x0) (rerun: 64) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r8, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="0011e7f00000"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r8, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="400000d2d75922b3b4dc1e834b5764ec49f7419bed03e99ccde6d1fa81e5298b95b6a44453aa3a45dc038e222af66994834aba3bac8954b1bd1f1ffe760f362ec174899679c7673e44af11ef3e6ef502db3b66e681704d4e0c102b5ea6271bc079f212a716d55041fc0c593cd799b327ed3e29f3de3001f34390464e4ee0b25c38ce0cdd9b98e82f49e39782bcf732a06c2ca7d0c194a48d53a9b3ab99e00afc60317fbb2c881df60504f96c5337dcf26ee8b4079505d4b297e8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x10, 0xffffffffffffffff, 0x0) (async) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r9, 0x104, 0x7, 0x0, &(0x7f00000001c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 726.124343ms ago: executing program 0 (id=474): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000300)={0x5, 0x7, 0x3, 0x4008, 0x3f3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c8001a"], 0x7) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x8840, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x626, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000008c0)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000640)={0x1, 0x1, 0x8, 0x2, r4}, 0x10) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="12010122957f4b08ed04971f08d8010203010902220011be7ca72114d706900809", @ANYRESOCT=r2, @ANYRES32=r2, @ANYRESDEC=r3], &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0}) r5 = memfd_secret(0x80000) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) modify_ldt$write(0x1, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000180)=0x4) fcntl$lock(r5, 0x5, &(0x7f0000000d00)={0x2, 0x0, 0x200, 0x4}) r7 = getpid() ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000680)={'\x00', 0xdeb, 0x2a1, 0x9, 0x8, 0x2, r7}) ioctl$BTRFS_IOC_INO_PATHS(r6, 0xc0389423, &(0x7f00000001c0)={0x8, 0x38, [0x8, 0x6, 0x5, 0x100], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$swradio(0x0, 0x0, 0x2) pipe2(0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24008094) 441.998872ms ago: executing program 1 (id=475): socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)) listen(r0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 342.061828ms ago: executing program 1 (id=476): socketpair(0x28, 0x3, 0x8940000, &(0x7f0000000040)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 322.211395ms ago: executing program 1 (id=477): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000fa461ad7e48489bffa560200130011186809fc071200000f0000ff3f21000000170a001700e0da8979d2fc6ca9e48270faf047105bc79e0b9971bcbedac0eead49dbecf96eebb1fdc2a85f4728f28690", 0x53}], 0x1) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4008031, 0xffffffffffffffff, 0xdc2cb000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r3, 0x52fbf000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000000000000000000009c22923cdb870f394387ccb40000000000e9479366c9d37a054948919760d58fdf82a25bf8c4431bd382640511a4f63cdf789a90df5b2d9f93b42d124d79b2049057581a2bd8d5a72ced1b86da703fab96b7ed026c59255eda43666f5c3b0d7978547cad16ce329d07693ecf123b1c49812f3c815eef66bad143d89e70ebeeef5e0172"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x7fff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000180)={0x2, 0x3, 0x6, 0x80800}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x1010, r0, 0xa4717000) 168.000021ms ago: executing program 0 (id=478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x4, 0xffffffffffffffff}) sendfile(r0, r0, 0x0, 0x7ffff000) 85.583346ms ago: executing program 0 (id=479): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x20000000) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="00042abd708c11dc33a250a75a61cb376fdb3d6c00fd00df2504000000040004000501000001000000eb9a9b"], 0x20}, 0x1, 0x0, 0x0, 0x64044845}, 0x40890) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES8=r2], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0000e600"}) r3 = syz_open_pts(r1, 0x20800) r4 = dup3(r3, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x44) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4038ae7a, &(0x7f0000000340)={0x2}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000100)=@generic={0x3, 0x6, 0xb6}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={r9, 0x208}, 0x8) listen(r7, 0x3) listen(r7, 0x8) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000e00)={{0x1, 0x0, 0x80, {0x1000, 0x2, 0x3}}, "7847c12be60b54c9726c8b75741d3ab6e8652e5b535130ad73b1663cb294c7baab2d0b2347ea970bcd7c80cf4c34938fd1b45699387daa431904c6cd276a67745a8bd26c16b2e341dc0952a2051826f9bc08fad558be5a8c913910c1fc1f7cb8b7678d440a1e0e0ed01a86f614c109d92da7d25a0977078b90a63cd1c5bf1a8ea3ba9aa0667f5ec8b7ececdf2c741724bd7feaac90ce3fe41d195f687a3f12310c6951664e05af3b28613fa36dd514bf0db362f724271324ea09b89aafed5a86c7671a2b5df730612a9125fc9337e0918fb73fcbb980810fdcae01ee651eaf04aac7d9685a72761afac4d2479fce8490cda2f4c00d98e3b93bf7ab2c1305f78c6333163b5fe84d89253593c34dd011354f542d27b15be793afb0792b27916a4c62ddd3acb9ff3d581ed94c45c00bd2226b736d7a8b7006011560fa137be28275fb8f6f14c613327019732bc7912015d616190d3e204a0d8c558d79dd4877e49b58b048e7c092477ae31215704e078474595666eb77fc80960aebbb21b613eddeb32b4ef12124271d07373537ca60ece630b9499c8ad1700042787b73fe700dc6c012e41092c65d38fbc3518e1c5728c039f40274f0593b0c233a89343f7327fd84d16ae85e539874eb51748822d55e2701297d43268610ce0b34b2320271210e07e72929f86a500196bda4fd9342c90702fd1cd423ce1bebd3793bcf5722958e6d2950abd8dcd2563832dfbf5dd1b8479865ddb0dfce298dfcc4c45014729112a708edf1233a809cad3795d6c2ef0b73cf817add2c3bca6221fddeaa72abfc17322076cf503984e3b14410da13c4a9d6ac382d237f02fb00b75ee7ed434a568e1dd744f34974147ff9e103eefa832dcc00860b9b39f140bb2c494ec80516c230a16579add60e074d128bba085649a2be9309c5876ecb674122cd055ca132d546720325604e6e124c09941a808c256ac9cfbae73ccfed52ee720b844eae9810e027c7390c92ff680c27aa309df6484d55a4572c735f66df281a272339483c6301e19bcae4c3844ec8baf713dea71a96de8df294b9f8374f6d1af6251f3da673d67153646bdad309434c121ca8a56ce1a242cf2074d2ec00bc5ff1cc8eadb7587faeb3903aa70f2f541f22c15788f50421cae7d4a672a44a5d4aaf25fbf472f3b63aa8e9d44fa355c426f4447e78f73bcaba27e1846833f2bfdb5c7123e00b510d09c3748d0ccc8c20364a2235be5580a5e24bfef54e3007c430730d2a8065cf90a9d433c59b76495f95788f0fd3d8382da30fe0051edd0f1cae0d9e36ebd8bf9e4d021e8c9aa13c80b44e95967cb609ec607f4145ab5cfa68da837263f870c0c27917a2a8cf16673501877cd255320c6a368db3b008139572f7e2cce6b1e3270081f3484d978783e7604f5eed9a342394ba2b3754b533859140356b114fb4e056f07203278055704a316b8542766566adca73c755c415df2d7dd5475b1bcd696674acb87fc86b60ec0dd47aef640bde59a82cf6b6c0b8de3b88d154c4c9a9030c08f310cc11c2a6e01aefacb93dbe79f6b4577d0da36a8f283e62c39ca00e86a9f30ad2ba603a8a2af2ba1ccef49853e972e673535b355a89e5fa9b36a84f6828aed03d2230cfcdb5fbc54ad01a8cd99f1124b2600065d86a5c732202bacff06a4e19df303ea2c0c161bee8b2fb94ae6bd77b269d8e95a1f3df9c3bd8e1d24427c3a4738ab9bfdcf449dd726de6263dc14985b3db9a0fd1937f4f4f81e81762aed0af3b89bf1060a7feb2ea223054a2ba0a477ab718fec8a5b465ac0020707b9697e08b86c2c8808e255bb6f837b97eb011d8aed214d344e356b6b933da86458e7504805a542d2207d8ae733da468220ebda02017e5a8947b13300ec22cc80dc0f47210ba3b0f8099329bb0fbde5f8791fe9dad08046130c0d6400eea5fb194ea4919c257e0adaedc3b5a0a680882b0c879147fa5a661f6e91cbe49c9864c17029c02211a638b8a7aaba752232bac70320f8277afc77a2d186521c13e420e421448fbf90103552aff5ea1f19bfaf699aa922f9e476430629c1dd2e1c8be4ca1b82e4b0932691bb6d83e01d2fa2e61782773c29ac2bbc1830c675708f3d3b6b6e6967d4a4e52e36f670c0f5f235a214506bdb0b45967cf2d0fb59de9d5faeff2efbd28d31558557f7df349fc29b7295cdb15d82536e2bd305a1298beae68f77cf7c7b4817ee97b09456bd2890f66e7f17b1b28b5886de9a01ae9a4952521cc69a40206eeb79e698ff4cb721ea9f64f5cc7ec2bc7c6edc0a0c1cf9ead00b0bfb6780302c42e5e74ac612c5b82844fc55f5f5e116e876dc0db2cb283b6263672e8257431934710074d04be96adadd565a5c02e93b9e2d242c6124b006b1bcc2fb87926204f89716d5b480811dbfffdbc04f76bc5099c6c937e6861223e92a9809f8db565e9fe81ee5b54563aa1d6611135149fa19f6568c4a49cd3da387a4a968a26f8b0e5cb9289777fd2b227227fac55c80a48de4ab42a4ecbda2f111af24a8c931f9de1f2fb28908ece9d4fe46aa85aca6be3c562aafa495e1a2f22defbfc5120808963dff6beb17a388506a5d5a5b8c67c7b8f1b8ebb0f8895ba547227c995c12b57b27499ce919ecdd4c6c579c38773eb7cbd06b6670f435a78733e1972e5f3a877b1898e6d4fc51d8696e4b92e6fc750b1d5d901a2580318e68f5d0b9554d463de6cc2b58fc7b3da25c15b8e5881a6c5944879efa5836135cc58d975e2269a333f4ef4f153dcf9adfcfc497a53c0b716d42853eba22e328816fc3ab091a74e102e1dea491a6fbac36c8b47155a4818a1340b8f5f78d87712a00328237913d217c0bc02f0f23e504425fd6426bac899a86f5fad46bfa2dca193f16931c2c19dc30349e2a0df2aad6dcccb0b108cf51ec2bde446235dc4ae61b0660e300c60891674162f7d61d28760ec2a50407324c4e21b4b1ea179cb19d14178d95b8b8c4e43c7cae2fffd221c98f4ddaf936ccf5372dfb11944c6de463bb6aac1b56cb2449bbe91155c35e4038d56a12b68754efbcbcdae9446bec8615edb35ffdb3626367bd12fbe550ae8c3d6a1f5f544fd1170fd1867daab55aab158704be227f7fd83acb44ce7e27f994fd354754f29d1aa12c5fa063bb49115ab975bfcac0830ccc3b9db0287c897045a8d0b9b4b0010f005607eb68aaa2546213d7992c1b9fe80bd49357c1c97ad7d970ec04dd98dc8394266d0a28f45b7048a50af40ca93de34efb9f7f9d11ba107aaee7c92ee2635b92c63cca0b5751f478cd0ab5f758baf1aaa83abbc66347eb21be80286c8206621ff2bb5da7ef422fea662986674e6ca991c74c8e6dda818f99dcbf864f886b053969622117e0d4dc8fd4ba90ed0f91fffeef053d2ad41d555ace48b9a146910361e2860203c10a594ff32af349d27b995ce842fada453f83801e764810aa494fca3b20bedbd7a64937d7d2a131cbedabe3cc7b08d00a93df377851e36c4a5ae6be80069bb034ef1c2f3c747938ec20fc5528a778394a9035732312e3fb6db77f81c758fb40329209a1c401d68a7e154e554e3cd406b1a72d82147fed4201a3ba4465292ae6cc11a0eb3636699c3bbb3636c82b5c594e321b0b2864cf9bb1e54964ac3e24be47349d38fc1eab6437fcd84ca5b80b7ead0e4d90af85bf274cfd4c7bcdf8e3b1cdf0df6c4bbec2aa941333938c0e7b8ca70327242cb60fc8d2faf63428cd3752d9c4af49a30bc6295ba474e179ae004b25d37fb35c916b51f5dee3ec2acd599f50b0584b65c4a99ca21ca994c933e909e9ee32df4eb5d0074104c7e78ead04e4e1e1e120a425f3ddc9530e2406a7cedecbb9c802b715bd9a6888d2e301c78c9d1c687842f2d2fdfeb3158f306a6917f173933f4504a6872fc04100b9120390cca537265b50e672d1bec01ae74eea54d090e11e370bd3612ada4f2c4e36c4aa7ecc0c524309192e0fc1817be50fa9e7991eb5a69e208d9b6c39565c6296688f17a25f9cc480d83f902ecea174f26c569137b77a4619b5c36b75370d2e448110b620f160516848a1dac724f9111f15babd3c95ca4058408c5b8727a76a0086377fd8275bdc2f20c2a906c639e1d3a85a591cea4f5e216c2aa88ca7474b2e43a9579d1a5c3cbe1298b41ce7799c16e693bce74bd206cb9e312b93042cac4026dbd84c09c898f8d52d1e63eaa69f240d1adf66718bbdd03a657c38de9c778627cfbfb3a839accd5802cd3c6887c1f84ee250ba71c3468bac74449fb67761c67c7ce90bccd3227ff7f059ab699de90c0cdde5fc28c734d1a8f71d2afe9a56180dc63c86ea18f619bd052d188632f8c93fa4b502ab43ca94fc75685ab8300bfbab5a1c782ae4e31299b6878d35ab750a1ea1c9a7e7d2bfe764d39d47ae5078ddedbc993341694e57f0403170b39c4b6b1897c26d4e8374c1559aa38e71696e3a3a0c76ceed810086c1ecc806cd5e7f855cef75a1e3327440fecc749e402ae61ff856918dba234b6cccd052a564f3ecf329b25665daaafbb26d49d5b1596347850aa851adc6b81dc59e48c53ed697a8bacba382db632df55ef8adf0195a2edf6c6b6fe4a415bb3eb9a653b120bdc006259662e583235b963e28a9f8ac1044a29f41de431112bd291b35492661495b40a5af7656c73e9c21e8400f316e63411c9600e1cfc7dd496b6ac576c060391290fdd6ec81e65efcc01bd7577db5fb6934c055dcb12d8aee36ad92fb287de9f8aa65039ccdafb77fe98999c976c88deebd889adb5700de4323a66a46826d62859f5332ce5d7a41787511b92b1a80ad01c310059763debf818c9dff655c34fa66790821c31b3c658ba18e222e161e633fe4e8046481d53eb7c35c708eeb334fc52d4276899e5907f04cf130284599b283387e03efd347c63c13445448010aba7a725d4fb7d4f77807006e51e9dffce630a83ee23b8baa274f5d2611a1a4b6434c0277b6b47cdef373ec9ad45ee06867f8ee49defe0fffdf6009b8c6ecc6e025bc6b89330ec59ee32988c74c50ec2a8de59b678187b2609fd784f7056e632c15026529a0e04841539b2995c041bf9f0ca0a8c8cd86902a2ffbba181ea483d63dcd6173b2b68732e0d169d311d78aeef55bbf16e1fc988a82d9efe179f364d06676eaba5670d77fc80314ccad776180f7c89d9d197f55378347923226e63390b3a5cb02b4caaa1f128a26890367c01475065214523e4b4611589e4b34a9bb5bb9e839f389ce1c79a7feaf38301dd68983b8930b0f0fccdfb246583d3171a90925fdee5115d65d21cb4b0d78df07c6827418b4bc69c676b278789dc24b19f09d4b55b5f51e57ed6eecab804be2863fe4d1395bfade584237023ed0b97b3704455c54ec080c2553daaadb2276f2ac9e20436d31662184ac8c46f0ef1710119fb2c23690671b0453158e95268d94f577cd5ae46ec09985946e0c8254dff971626d5f02d63f3ba319c385c639e2c21750a41ae05ca351f5c7a9e019fc9f2c3838c43a45f16e8d48c3d726a4c23fe0bb51d821830cfbac2648a4c9337dda436de79aa398c67479ab55a43453537989949c2f09e86620df75e834fd4927b9743bd5aa0d1f7b65a11fedf2c60ae22804bb72493a7760d4ded0deeabccba5097ec28b491f231bd5d95c7a0e58376801585bf2560af90df3e889a51cb357d8fcde3b4cc0f8ed10d67f84f2ec4e19f6bff0612863cd304dba59a02d2c26a00800dacdc97fa9fe7bc2846ca14a275f2010e1c0c0b6d894d2fff7df6d2a16ce1f76bef3a7489ac5ca8", "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"}) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r10, 0x92, 0x5, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) r11 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_SETINTERFACE(r11, 0x80085504, &(0x7f0000000180)={0xdbf, 0x3ff}) mmap(&(0x7f00007dd000/0x2000)=nil, 0x2000, 0x3000003, 0x22052, 0xffffffffffffffff, 0x30afa000) 82.053372ms ago: executing program 1 (id=480): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0xc2ca70811247cd71, 0x0, {0x7, 0x1f, 0xfffffffe, 0x640184, 0x1, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x8, 0x7}}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000052000100000000000000000002000000090001"], 0x20}}, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mount$nfs(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x2000, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r3, r2, 0x0, 0x7fffefff) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r5, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000}) fadvise64(r2, 0x9, 0x9, 0x2) sendfile(r2, r2, 0x0, 0x7ffff000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x9c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xd06}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_USERDATA={0x4f, 0xd, 0x1, 0x0, "132593f6e4aa73ca01015e7842f8e0d0a8186029bbdd29c7e820a67569dc9555b39f81d7958104fd774b88f09392577115ae4df61d3c329c1edfcfaf82b65597a1556398fda41eee819261"}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa2}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x3, 0x0, 0x0, {0x4, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x805}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x1c0, 0xb, 0xa, 0xacc557e0b1526f81, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DESC={0x4c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x128, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x11c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x24000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff80}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb2fd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe701}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff0f6d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfe2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2b}]}, @NFT_MSG_DELSET={0x158, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_EXPRESSIONS={0x130, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x50, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2a}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x48, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x401e}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}}, @NFT_MSG_DELSET={0xdc, 0xb, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0xc0, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xc2}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x88, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_USERDATA={0x68, 0xd, 0x1, 0x0, "84ed596ede872d3e8690f590e75e6cf74fc1356f554cdd231860b7c893b159aac50301807de53b90725894d26bb850403401bd06a0e32bec934fa9103ec71b5004a7130346307a718845ccd4e8a59ffde92c85da6fb81bfe2a7bb047f75dd29e25db2fd0"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) 0s ago: executing program 1 (id=481): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) close(0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x54) mmap(&(0x7f0000978000/0x3000)=nil, 0x3000, 0x2, 0x28011, r0, 0x0) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 65.588824][ T5848] cgroup: Unknown subsys name 'net' [ 65.708881][ T5848] cgroup: Unknown subsys name 'cpuset' [ 65.716428][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.079712][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.438734][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.446228][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.453505][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.461266][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.468416][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.475560][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.482997][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.490283][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.491200][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.498248][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.505987][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.519506][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.519899][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.534351][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.549844][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.551386][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.565459][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.566375][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.580824][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.597568][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.810654][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 70.881419][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 70.946847][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 70.957039][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.964277][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.971695][ T5858] bridge_slave_0: entered allmulticast mode [ 70.978465][ T5858] bridge_slave_0: entered promiscuous mode [ 70.988489][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.995931][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.003417][ T5858] bridge_slave_1: entered allmulticast mode [ 71.011122][ T5858] bridge_slave_1: entered promiscuous mode [ 71.059026][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 71.072432][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.084847][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.135302][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.145651][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.153415][ T5857] bridge_slave_0: entered allmulticast mode [ 71.160972][ T5857] bridge_slave_0: entered promiscuous mode [ 71.182185][ T5858] team0: Port device team_slave_0 added [ 71.188297][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.195587][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.203035][ T5857] bridge_slave_1: entered allmulticast mode [ 71.210052][ T5857] bridge_slave_1: entered promiscuous mode [ 71.228703][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.235865][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.243372][ T5864] bridge_slave_0: entered allmulticast mode [ 71.250006][ T5864] bridge_slave_0: entered promiscuous mode [ 71.258244][ T5858] team0: Port device team_slave_1 added [ 71.280795][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.288128][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.295576][ T5864] bridge_slave_1: entered allmulticast mode [ 71.302278][ T5864] bridge_slave_1: entered promiscuous mode [ 71.316711][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.335441][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.342715][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.369364][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.382300][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.403773][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.411036][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.437477][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.463889][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.491018][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.498485][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.505707][ T5862] bridge_slave_0: entered allmulticast mode [ 71.513259][ T5862] bridge_slave_0: entered promiscuous mode [ 71.521996][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.539122][ T5857] team0: Port device team_slave_0 added [ 71.545352][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.552928][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.560379][ T5862] bridge_slave_1: entered allmulticast mode [ 71.567433][ T5862] bridge_slave_1: entered promiscuous mode [ 71.582262][ T5858] hsr_slave_0: entered promiscuous mode [ 71.588738][ T5858] hsr_slave_1: entered promiscuous mode [ 71.596646][ T5857] team0: Port device team_slave_1 added [ 71.615887][ T5864] team0: Port device team_slave_0 added [ 71.643130][ T5864] team0: Port device team_slave_1 added [ 71.657790][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.679012][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.679067][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.686732][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.693928][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.718621][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.737041][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.744012][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.770655][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.782807][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.828518][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.835761][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.862081][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.874138][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.881281][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.907591][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.920889][ T5862] team0: Port device team_slave_0 added [ 71.928926][ T5862] team0: Port device team_slave_1 added [ 71.983423][ T5857] hsr_slave_0: entered promiscuous mode [ 71.989649][ T5857] hsr_slave_1: entered promiscuous mode [ 71.995605][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 72.002390][ T5857] Cannot create hsr debugfs directory [ 72.008633][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.015604][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.041789][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.074185][ T5864] hsr_slave_0: entered promiscuous mode [ 72.080920][ T5864] hsr_slave_1: entered promiscuous mode [ 72.087616][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 72.093350][ T5864] Cannot create hsr debugfs directory [ 72.099427][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.106427][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.133797][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.241412][ T5862] hsr_slave_0: entered promiscuous mode [ 72.247750][ T5862] hsr_slave_1: entered promiscuous mode [ 72.253846][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 72.259738][ T5862] Cannot create hsr debugfs directory [ 72.355732][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.373166][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.384619][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.403637][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.449405][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.474062][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.494174][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.512278][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.536283][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.556286][ T5868] Bluetooth: hci1: command tx timeout [ 72.556600][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.573612][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.584221][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.632745][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.639559][ T5868] Bluetooth: hci3: command tx timeout [ 72.639592][ T5868] Bluetooth: hci0: command tx timeout [ 72.639614][ T5868] Bluetooth: hci2: command tx timeout [ 72.659152][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.669124][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.679048][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.713629][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.727933][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.750242][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.757422][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.779542][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.786713][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.849498][ T5858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.860085][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.902869][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.913705][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.945256][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.957840][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.967845][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.984123][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.991360][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.008000][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.015182][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.044329][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.051600][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.071010][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.078398][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.094254][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.125138][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.132339][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.150746][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.157917][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.182933][ T5864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.196704][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.235907][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.334121][ T5858] veth0_vlan: entered promiscuous mode [ 73.344424][ T5858] veth1_vlan: entered promiscuous mode [ 73.384213][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.428483][ T5858] veth0_macvtap: entered promiscuous mode [ 73.448003][ T5858] veth1_macvtap: entered promiscuous mode [ 73.492061][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.520348][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.528625][ T5857] veth0_vlan: entered promiscuous mode [ 73.542430][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.560327][ T5857] veth1_vlan: entered promiscuous mode [ 73.572828][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.592419][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.602122][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.616611][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.647509][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.671658][ T5857] veth0_macvtap: entered promiscuous mode [ 73.688082][ T5857] veth1_macvtap: entered promiscuous mode [ 73.712190][ T5864] veth0_vlan: entered promiscuous mode [ 73.722560][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.734409][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.762233][ T5864] veth1_vlan: entered promiscuous mode [ 73.771313][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.775833][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.791680][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.799210][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.826615][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.851981][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.869302][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.881536][ T5862] veth0_vlan: entered promiscuous mode [ 73.891627][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.903702][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.954156][ T5862] veth1_vlan: entered promiscuous mode [ 73.983026][ T5864] veth0_macvtap: entered promiscuous mode [ 74.007833][ T5864] veth1_macvtap: entered promiscuous mode [ 74.030954][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.053454][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.069293][ T5862] veth0_macvtap: entered promiscuous mode [ 74.102009][ T5862] veth1_macvtap: entered promiscuous mode [ 74.124841][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.135233][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.144845][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.158566][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.177643][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.199606][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.208746][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.229773][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.242291][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.259748][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.310233][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.334073][ T5959] /dev/rnullb0: Can't open blockdev [ 74.385655][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.403289][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.437004][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.471009][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.503140][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.608092][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.625245][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.625825][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.647062][ T5866] Bluetooth: hci1: command tx timeout [ 74.658092][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.681378][ T5968] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.715202][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.724626][ T5866] Bluetooth: hci2: command tx timeout [ 74.729853][ T5868] Bluetooth: hci0: command tx timeout [ 74.730292][ T5866] Bluetooth: hci3: command tx timeout [ 74.740981][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.848929][ T5974] 9p: Bad value for 'port' [ 74.858234][ T5973] netlink: 'syz.3.4': attribute type 7 has an invalid length. [ 74.880532][ T5973] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.892108][ T5974] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.996416][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.066987][ T5929] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.185606][ T9] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 75.199258][ T9] usb 2-1: config 0 has no interface number 0 [ 75.212369][ T9] usb 2-1: config 0 interface 98 has no altsetting 0 [ 75.230608][ T9] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 75.239120][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.247845][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.252301][ T5929] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 75.283594][ T9] usb 2-1: Product: syz [ 75.288456][ T9] usb 2-1: Manufacturer: syz [ 75.293183][ T9] usb 2-1: SerialNumber: syz [ 75.315598][ T9] usb 2-1: config 0 descriptor?? [ 75.427985][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.450046][ T5929] usb 3-1: config 0 descriptor?? [ 75.457670][ T5929] pwc: Askey VC010 type 2 USB webcam detected. [ 75.547163][ T9] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 75.886051][ T5929] pwc: recv_control_msg error -32 req 02 val 2b00 [ 75.898482][ T5929] pwc: recv_control_msg error -32 req 02 val 2700 [ 75.907858][ T5929] pwc: recv_control_msg error -32 req 02 val 2c00 [ 75.915064][ T5929] pwc: recv_control_msg error -32 req 04 val 1000 [ 75.931915][ T5929] pwc: recv_control_msg error -32 req 04 val 1300 [ 75.940198][ T5929] pwc: recv_control_msg error -32 req 04 val 1400 [ 75.951067][ T5929] pwc: recv_control_msg error -71 req 02 val 2000 [ 75.958184][ T5929] pwc: recv_control_msg error -71 req 02 val 2100 [ 75.965264][ T5929] pwc: recv_control_msg error -71 req 04 val 1500 [ 75.973014][ T5929] pwc: recv_control_msg error -71 req 02 val 2500 [ 75.980513][ T5929] pwc: recv_control_msg error -71 req 02 val 2400 [ 75.990477][ T5929] pwc: recv_control_msg error -71 req 02 val 2600 [ 76.006075][ T5929] pwc: recv_control_msg error -71 req 02 val 2900 [ 76.013243][ T5929] pwc: recv_control_msg error -71 req 02 val 2800 [ 76.020415][ T5929] pwc: recv_control_msg error -71 req 04 val 1100 [ 76.036584][ T5929] pwc: recv_control_msg error -71 req 04 val 1200 [ 76.044516][ T5929] pwc: Registered as video103. [ 76.052573][ T5929] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 76.070091][ T5929] usb 3-1: USB disconnect, device number 2 [ 76.080559][ T5991] netlink: 'syz.0.14': attribute type 1 has an invalid length. [ 76.114446][ T5991] /dev/rnullb0: Can't open blockdev [ 76.206189][ T9] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 76.214420][ T5916] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.228734][ T5994] /dev/rnullb0: Can't open blockdev [ 76.264405][ T5997] /dev/rnullb0: Can't open blockdev [ 76.294674][ T5999] ======================================================= [ 76.294674][ T5999] WARNING: The mand mount option has been deprecated and [ 76.294674][ T5999] and is ignored by this kernel. Remove the mand [ 76.294674][ T5999] option from the mount to silence this warning. [ 76.294674][ T5999] ======================================================= [ 76.418008][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.428111][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.441435][ T5916] usb 4-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 76.450681][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.460121][ T5916] usb 4-1: config 0 descriptor?? [ 76.499547][ T6006] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 76.507465][ T6006] /dev/rnullb0: Can't open blockdev [ 76.616024][ T5934] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.716065][ T5866] Bluetooth: hci1: command tx timeout [ 76.776663][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 76.784123][ T5934] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 76.795303][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.804145][ T5866] Bluetooth: hci0: command tx timeout [ 76.804170][ T5872] Bluetooth: hci3: command tx timeout [ 76.815901][ T5868] Bluetooth: hci2: command tx timeout [ 76.820776][ T5934] usb 1-1: config 0 descriptor?? [ 76.834622][ T5934] as10x_usb: device has been detected [ 76.851576][ T5934] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 76.895153][ T5916] wacom 0003:056A:0336.0001: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.3-1/input0 [ 76.921615][ T5934] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 76.970003][ T5934] as10x_usb: error during firmware upload part1 [ 76.978588][ T5934] Registered device nBox DVB-T Dongle [ 77.031847][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.065636][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.077826][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.079973][ T5988] /dev/rnullb0: Can't open blockdev [ 77.086668][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.096963][ T24] usb 4-1: USB disconnect, device number 2 [ 77.112091][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.140632][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.155606][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.167558][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.180948][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.190540][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.208246][ T5934] usb 1-1: USB disconnect, device number 2 [ 77.239219][ T5934] Unregistered device nBox DVB-T Dongle [ 77.245105][ T5934] as10x_usb: device has been disconnected [ 77.503001][ T6024] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 77.514464][ T6024] /dev/rnullb0: Can't open blockdev [ 77.960047][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 78.057964][ T9] usb 2-1: failed to restore interface 98 altsetting 4 (error=-71) [ 78.073729][ T9] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 78.161818][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 78.181752][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.203164][ T24] usb 4-1: Product: syz [ 78.214923][ T24] usb 4-1: Manufacturer: syz [ 78.228901][ T24] usb 4-1: SerialNumber: syz [ 78.246972][ T9] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 78.255755][ T10] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 78.261014][ T24] usb 4-1: config 0 descriptor?? [ 78.269995][ T10] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 78.284458][ T9] usb 2-1: USB disconnect, device number 2 [ 78.430027][ T6037] netlink: 36 bytes leftover after parsing attributes in process `syz.2.30'. [ 78.520281][ T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 78.721140][ T30] audit: type=1326 audit(1756661261.674:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.3.28" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4ecf8ebe9 code=0x0 [ 78.734427][ T6057] netlink: 'syz.0.37': attribute type 6 has an invalid length. [ 78.810201][ T5868] Bluetooth: hci1: command tx timeout [ 78.877421][ T5868] Bluetooth: hci0: command tx timeout [ 78.882889][ T5868] Bluetooth: hci2: command tx timeout [ 78.889541][ T5872] Bluetooth: hci3: command tx timeout [ 78.903785][ T6060] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.216038][ T5916] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.377241][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 79.385226][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.406003][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.415881][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.456016][ T5916] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 79.465454][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.486776][ T5916] usb 3-1: config 0 descriptor?? [ 79.505314][ T6066] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 79.512647][ T6066] /dev/rnullb0: Can't open blockdev [ 79.694650][ T6072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.704988][ T6072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.728863][ T5916] nzxt-kraken2 0003:1E71:170E.0002: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.2-1/input0 [ 79.779313][ T6074] /dev/rnullb0: Can't open blockdev [ 79.934271][ T5960] usb 3-1: USB disconnect, device number 3 [ 80.038817][ T6058] ./file0: Can't lookup blockdev [ 80.084637][ T6097] binder: 6096:6097 ioctl c0306201 2000000003c0 returned -14 [ 80.093711][ T6097] binder: 6096:6097 unknown command 0 [ 80.099910][ T6097] binder: 6096:6097 ioctl c0306201 200000000440 returned -22 [ 80.876901][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 80.914861][ T6120] capability: warning: `syz.1.55' uses deprecated v2 capabilities in a way that may be insecure [ 81.058848][ T6129] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.59'. [ 81.072450][ T6129] /dev/rnullb0: Can't lookup blockdev [ 81.094860][ T5934] usb 4-1: USB disconnect, device number 3 [ 81.229762][ T6137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.259963][ T6137] bond0: (slave rose0): Enslaving as an active interface with an up link [ 81.383481][ T6149] /dev/rnullb0: Can't open blockdev [ 81.481692][ T5934] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.626169][ T5934] usb 4-1: device descriptor read/64, error -71 [ 81.866049][ T5934] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.009182][ T5934] usb 4-1: device descriptor read/64, error -71 [ 82.100810][ T6204] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 82.117924][ T5934] usb usb4-port1: attempt power cycle [ 82.122807][ T6204] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 82.471500][ T5934] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 82.516688][ T5934] usb 4-1: device descriptor read/8, error -71 [ 82.607898][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'. [ 82.757055][ T5934] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 82.787638][ T5934] usb 4-1: device descriptor read/8, error -71 [ 82.797021][ T5916] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.896902][ T5934] usb usb4-port1: unable to enumerate USB device [ 82.959280][ T5916] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.978509][ T5916] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.007312][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.024160][ T5916] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 83.043617][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.067088][ T5916] usb 3-1: config 0 descriptor?? [ 83.116113][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.278807][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.288237][ T24] usb 2-1: config 4 has an invalid interface number: 92 but max is 0 [ 83.297296][ T24] usb 2-1: config 4 has no interface number 0 [ 83.303413][ T24] usb 2-1: config 4 interface 92 has no altsetting 0 [ 83.319287][ T24] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 83.328440][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.336773][ T24] usb 2-1: Product: syz [ 83.341149][ T24] usb 2-1: Manufacturer: syz [ 83.345771][ T24] usb 2-1: SerialNumber: syz [ 83.481067][ T5916] itetech 0003:06CB:73F6.0003: item fetching failed at offset 0/3 [ 83.490249][ T5916] itetech 0003:06CB:73F6.0003: probe with driver itetech failed with error -22 [ 83.669939][ T24] radioshark 2-1:4.92: Invalid radioSHARK device [ 83.697137][ T24] radioshark 2-1:4.92: probe with driver radioshark failed with error -22 [ 83.707288][ T24] usbhid 2-1:4.92: couldn't find an input interrupt endpoint [ 83.720736][ T24] usb 2-1: USB disconnect, device number 3 [ 83.739163][ T6258] netlink: 52 bytes leftover after parsing attributes in process `syz.0.87'. [ 83.765754][ T5916] usb 3-1: USB disconnect, device number 4 [ 83.875280][ T6272] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 83.899788][ T6272] syz.0.90 uses obsolete (PF_INET,SOCK_PACKET) [ 84.091307][ T30] audit: type=1804 audit(1756661267.044:3): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.94" name="rnullb0" dev="tmpfs" ino=107 res=1 errno=0 [ 84.220154][ T6290] Zero length message leads to an empty skb [ 84.242033][ T6288] netlink: 60 bytes leftover after parsing attributes in process `syz.0.96'. [ 84.251524][ T6288] netlink: 60 bytes leftover after parsing attributes in process `syz.0.96'. [ 84.276617][ T6288] netlink: 60 bytes leftover after parsing attributes in process `syz.0.96'. [ 84.860617][ T6313] /dev/rnullb0: Can't lookup blockdev [ 85.011049][ T6313] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 85.817902][ T6337] /dev/rnullb0: Can't open blockdev [ 85.980382][ T6349] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 86.130193][ T30] audit: type=1804 audit(1756661269.084:4): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.117" name="rnullb0" dev="tmpfs" ino=107 res=1 errno=0 [ 86.140801][ T6358] tmpfs: Invalid uid '0x00000000ffffffff' [ 86.375164][ T6375] trusted_key: syz.2.122 sent an empty control message without MSG_MORE. [ 86.586397][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.607037][ T5916] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 86.668318][ T6379] /dev/rnullb0: Can't open blockdev [ 86.757619][ T9] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 86.776224][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 86.786094][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 86.806379][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 86.818855][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.832738][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 86.846031][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short [ 86.866063][ T9] usb 2-1: Product: syz [ 86.870295][ T9] usb 2-1: Manufacturer: syz [ 86.875091][ T9] usb 2-1: SerialNumber: syz [ 86.883354][ T5916] usb 4-1: config 190 has an invalid descriptor of length 48, skipping remainder of the config [ 86.902717][ T5916] usb 4-1: config 190 has 0 interfaces, different from the descriptor's value: 17 [ 86.912835][ T9] usb 2-1: config 0 descriptor?? [ 86.930267][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 86.936758][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 86.948699][ T9] usb 2-1: selecting invalid altsetting 0 [ 86.956167][ T5916] usb 4-1: New USB device found, idVendor=04ed, idProduct=1f97, bcdDevice=d8.08 [ 86.996010][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.004064][ T5916] usb 4-1: Product: syz [ 87.046285][ T5916] usb 4-1: Manufacturer: syz [ 87.051370][ T121] cfg80211: failed to load regulatory.db [ 87.057920][ T5916] usb 4-1: SerialNumber: syz [ 87.341199][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.356326][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.560009][ T24] usb 2-1: USB disconnect, device number 4 [ 87.728682][ T24] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 87.753024][ T6393] /dev/rnullb0: Can't lookup blockdev [ 87.876098][ T24] usb 2-1: device descriptor read/64, error -71 [ 88.116035][ T24] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 88.256082][ T24] usb 2-1: device descriptor read/64, error -71 [ 88.376378][ T24] usb usb2-port1: attempt power cycle [ 88.711864][ T30] audit: type=1804 audit(1756661271.664:5): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.133" name="rnullb0" dev="tmpfs" ino=107 res=1 errno=0 [ 88.736037][ T24] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 88.766513][ T24] usb 2-1: device descriptor read/8, error -71 [ 89.112866][ T24] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 89.178860][ T24] usb 2-1: device descriptor read/8, error -71 [ 89.253459][ T5916] usb 4-1: USB disconnect, device number 8 [ 89.376164][ T24] usb usb2-port1: unable to enumerate USB device [ 89.667232][ T6426] /dev/rnullb0: Can't open blockdev [ 89.772558][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 89.997266][ T5868] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 90.005904][ T5868] Bluetooth: hci3: Injecting HCI hardware error event [ 90.012104][ T6440] /dev/rnullb0: Can't lookup blockdev [ 90.012844][ T5872] Bluetooth: hci3: hardware error 0x00 [ 90.153163][ T6442] netlink: 'syz.0.148': attribute type 15 has an invalid length. [ 90.196920][ T6442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.148'. [ 90.475645][ T6455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.485278][ T6455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.726317][ T5916] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 91.010534][ T30] audit: type=1804 audit(1756661273.964:6): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.155" name="rnullb0" dev="tmpfs" ino=107 res=1 errno=0 [ 91.296024][ T5916] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 91.517578][ T5916] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 91.525857][ T5916] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 91.551735][ T5916] usb 2-1: config 0 has no interface number 0 [ 91.561361][ T5916] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.575793][ T5916] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65522, setting to 64 [ 91.588829][ T5916] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.602322][ T5916] usb 2-1: config 0 interface 52 has no altsetting 0 [ 91.611290][ T5916] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 91.620927][ T5916] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 91.654309][ T5916] usb 2-1: Manufacturer: syz [ 91.663539][ T5916] usb 2-1: config 0 descriptor?? [ 91.682620][ T5916] hub 2-1:0.52: bad descriptor, ignoring hub [ 91.690585][ T5916] hub 2-1:0.52: probe with driver hub failed with error -5 [ 91.765114][ T6488] wlan1 speed is unknown, defaulting to 1000 [ 91.774368][ T6488] wlan1 speed is unknown, defaulting to 1000 [ 91.787330][ T6488] wlan1 speed is unknown, defaulting to 1000 [ 91.827313][ T6489] /dev/rnullb0: Can't open blockdev [ 91.907830][ T5916] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input9 [ 91.919275][ T6488] infiniband syz0: set active [ 91.924062][ T24] wlan1 speed is unknown, defaulting to 1000 [ 91.933399][ T6488] infiniband syz0: added wlan1 [ 92.017494][ T6488] RDS/IB: syz0: added [ 92.022549][ T6488] smc: adding ib device syz0 with port count 1 [ 92.042732][ T6488] smc: ib device syz0 port 1 has pnetid [ 92.062392][ T5916] wlan1 speed is unknown, defaulting to 1000 [ 92.070521][ T6488] wlan1 speed is unknown, defaulting to 1000 [ 92.086165][ T5872] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 92.104734][ T6462] mmap: syz.1.153 (6462) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.247748][ T6488] wlan1 speed is unknown, defaulting to 1000 [ 92.489070][ T6488] wlan1 speed is unknown, defaulting to 1000 [ 92.775059][ T6488] wlan1 speed is unknown, defaulting to 1000 [ 93.041834][ T6500] /dev/rnullb0: Can't open blockdev [ 93.141305][ T6502] /dev/rnullb0: Can't open blockdev [ 93.369176][ T6507] kernel profiling enabled (shift: 8) [ 93.887152][ T24] usb 2-1: USB disconnect, device number 10 [ 94.068184][ T6529] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 94.264283][ T6534] /dev/rnullb0: Can't lookup blockdev [ 94.284484][ T6551] netlink: 100 bytes leftover after parsing attributes in process `syz.3.180'. [ 94.288417][ T6548] bond0: entered promiscuous mode [ 94.303121][ T6548] bond_slave_0: entered promiscuous mode [ 94.309177][ T6548] bond_slave_1: entered promiscuous mode [ 94.319280][ T6549] netlink: 100 bytes leftover after parsing attributes in process `syz.3.180'. [ 94.333719][ T6548] /dev/rnullb0: Can't open blockdev [ 94.404969][ T6556] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.653772][ T6564] warning: `syz.1.183' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.915876][ T6571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.183'. [ 94.946089][ T121] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.954484][ T6568] netlink: 60 bytes leftover after parsing attributes in process `syz.1.183'. [ 95.133324][ T121] usb 3-1: Using ep0 maxpacket: 8 [ 95.153464][ T121] usb 3-1: unable to get BOS descriptor or descriptor too short [ 95.173561][ T121] usb 3-1: config 190 has an invalid descriptor of length 48, skipping remainder of the config [ 95.202063][ T121] usb 3-1: config 190 has 0 interfaces, different from the descriptor's value: 17 [ 95.223869][ T121] usb 3-1: New USB device found, idVendor=04ed, idProduct=1f97, bcdDevice=d8.08 [ 95.243981][ T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.263435][ T121] usb 3-1: Product: syz [ 95.276882][ T121] usb 3-1: Manufacturer: syz [ 95.288779][ T121] usb 3-1: SerialNumber: syz [ 95.532457][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.541471][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.651342][ T6575] netlink: 'syz.1.185': attribute type 13 has an invalid length. [ 97.285296][ T6586] netlink: 72 bytes leftover after parsing attributes in process `syz.1.190'. [ 97.531345][ T121] usb 3-1: USB disconnect, device number 5 [ 97.754394][ T6604] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.195'. [ 97.766635][ T6604] delete_channel: no stack [ 97.771403][ T6604] delete_channel: no stack [ 97.961411][ T6620] MTD: Couldn't look up '/dev/rnullb0': -15 [ 97.970096][ T6621] MTD: Couldn't look up '/dev/rnullb0': -15 [ 98.117477][ T5916] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 98.131629][ T30] audit: type=1804 audit(1756661281.084:7): pid=6633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.204" name="rnullb0" dev="tmpfs" ino=107 res=1 errno=0 [ 98.158138][ T6634] /dev/rnullb0: Can't open blockdev [ 98.236171][ T5872] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 98.245107][ T5872] Bluetooth: hci0: Injecting HCI hardware error event [ 98.253240][ T5872] Bluetooth: hci0: hardware error 0x00 [ 98.286039][ T5916] usb 3-1: device descriptor read/64, error -71 [ 98.526250][ T5916] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 98.672873][ T121] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 98.680568][ T5916] usb 3-1: device descriptor read/64, error -71 [ 98.690734][ T6645] capability: warning: `syz.0.209' uses 32-bit capabilities (legacy support in use) [ 98.796598][ T5916] usb usb3-port1: attempt power cycle [ 98.847551][ T121] usb 2-1: Using ep0 maxpacket: 8 [ 98.853995][ T121] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.864420][ T121] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.877451][ T121] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 22048, setting to 1024 [ 98.890353][ T121] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 98.901465][ T121] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.916275][ T30] audit: type=1804 audit(1756661281.864:8): pid=6665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.216" name="rnullb0" dev="tmpfs" ino=107 res=1 errno=0 [ 98.936786][ T121] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.946920][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.161751][ T121] usb 2-1: GET_CAPABILITIES returned 0 [ 99.168123][ T5916] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 99.178404][ T121] usbtmc 2-1:16.0: can't read capabilities [ 99.197051][ T5916] usb 3-1: device descriptor read/8, error -71 [ 99.383510][ T1217] usb 2-1: USB disconnect, device number 11 [ 99.396192][ T5960] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 99.446166][ T5916] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 99.466610][ T5916] usb 3-1: device descriptor read/8, error -71 [ 99.536111][ T5960] usb 4-1: device descriptor read/64, error -71 [ 99.576345][ T5916] usb usb3-port1: unable to enumerate USB device [ 99.786081][ T5960] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 99.927162][ T5960] usb 4-1: device descriptor read/64, error -71 [ 100.046399][ T5960] usb usb4-port1: attempt power cycle [ 100.158153][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 100.316270][ T5872] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 100.326242][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 100.333291][ T24] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 100.341599][ T24] usb 2-1: config 0 has no interface number 0 [ 100.347882][ T24] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 232, changing to 11 [ 100.359393][ T24] usb 2-1: config 0 interface 85 has no altsetting 0 [ 100.369439][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 100.378709][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.386956][ T5960] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 100.394753][ T24] usb 2-1: Product: syz [ 100.399380][ T24] usb 2-1: Manufacturer: syz [ 100.404032][ T24] usb 2-1: SerialNumber: syz [ 100.410615][ T24] usb 2-1: config 0 descriptor?? [ 100.422056][ T5960] usb 4-1: device descriptor read/8, error -71 [ 100.630652][ T24] appletouch 2-1:0.85: Failed to read mode from device. [ 100.638399][ T24] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 100.686828][ T5960] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 100.706788][ T5960] usb 4-1: device descriptor read/8, error -71 [ 100.817098][ T5960] usb usb4-port1: unable to enumerate USB device [ 101.092013][ T24] usb 2-1: USB disconnect, device number 12 [ 101.409585][ T121] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 101.566140][ T121] usb 3-1: Using ep0 maxpacket: 8 [ 101.573262][ T121] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.583001][ T121] usb 3-1: config 190 has an invalid descriptor of length 48, skipping remainder of the config [ 101.606231][ T121] usb 3-1: config 190 has 0 interfaces, different from the descriptor's value: 17 [ 101.633885][ T121] usb 3-1: New USB device found, idVendor=04ed, idProduct=1f97, bcdDevice=d8.08 [ 101.652647][ T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.661360][ T121] usb 3-1: Product: syz [ 101.665827][ T121] usb 3-1: Manufacturer: syz [ 101.676867][ T121] usb 3-1: SerialNumber: syz [ 101.750889][ T6708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.890280][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.913807][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.598007][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 102.788309][ T24] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 102.803634][ T24] usb 4-1: config 1 has no interface number 0 [ 102.816332][ T24] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 102.834439][ T24] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 102.870795][ T6733] /dev/rnullb0: Can't open blockdev [ 102.871827][ T24] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.895849][ T6733] /dev/rnullb0: Can't open blockdev [ 102.897319][ T24] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 102.911493][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.922048][ T24] usb 4-1: Product: syz [ 102.927793][ T24] usb 4-1: Manufacturer: syz [ 102.933870][ T24] usb 4-1: SerialNumber: syz [ 102.939712][ T6736] netlink: 196 bytes leftover after parsing attributes in process `syz.0.240'. [ 102.952396][ T6713] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 102.972006][ T6736] rdma_rxe: rxe_newlink: failed to add wlan1 [ 102.995097][ T6736] /dev/rnullb0: Can't lookup blockdev [ 103.139631][ T6742] 9p: Bad value for 'wfdno' [ 103.189179][ T6713] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 103.647105][ T24] usb 4-1: Incompatible driver and firmware versions [ 103.668162][ T24] usb 4-1: USB disconnect, device number 13 [ 103.696809][ T5960] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 103.858086][ T5960] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.867988][ T5960] usb 2-1: not running at top speed; connect to a high speed hub [ 103.879320][ T5960] usb 2-1: config 4 has an invalid interface number: 32 but max is 0 [ 103.892831][ T5960] usb 2-1: config 4 has no interface number 0 [ 103.901533][ T5960] usb 2-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50 [ 103.913140][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.921877][ T5960] usb 2-1: Product: syz [ 103.927616][ T5960] usb 2-1: Manufacturer: syz [ 103.932518][ T5960] usb 2-1: SerialNumber: syz [ 104.136523][ T121] usb 3-1: USB disconnect, device number 10 [ 104.165300][ T5960] usb 2-1: Found UVC 0.02 device syz (17dc:0202) [ 104.180862][ T5960] usb 2-1: No valid video chain found. [ 104.192128][ T5960] usb 2-1: USB disconnect, device number 13 [ 104.703221][ T6760] /dev/rnullb0: Can't open blockdev [ 104.881894][ T6767] /dev/rnullb0: Can't open blockdev [ 105.107736][ T5960] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 105.309155][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.322636][ T5960] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 105.332357][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.346938][ T5960] usb 2-1: config 0 descriptor?? [ 105.561040][ T6775] netlink: 'syz.1.250': attribute type 10 has an invalid length. [ 105.566202][ T6776] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.584187][ T6776] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 105.585034][ T6775] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.605527][ T6775] team0: entered promiscuous mode [ 105.612191][ T6775] team_slave_0: entered promiscuous mode [ 105.625835][ T6775] team_slave_1: entered promiscuous mode [ 105.638335][ T6775] bond0: (slave team0): Enslaving as an active interface with an up link [ 105.675443][ T5960] usbhid 2-1:0.0: can't add hid device: -71 [ 105.683174][ T5960] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 105.695385][ T5960] usb 2-1: USB disconnect, device number 14 [ 106.016037][ T121] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 106.053618][ T6794] dvmrp0: entered allmulticast mode [ 106.178440][ T121] usb 4-1: Using ep0 maxpacket: 8 [ 106.212746][ T121] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.228963][ T121] usb 4-1: config 190 has an invalid descriptor of length 48, skipping remainder of the config [ 106.259391][ T121] usb 4-1: config 190 has 0 interfaces, different from the descriptor's value: 17 [ 106.282270][ T121] usb 4-1: New USB device found, idVendor=04ed, idProduct=1f97, bcdDevice=d8.08 [ 106.301792][ T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.326005][ T121] usb 4-1: Product: syz [ 106.330239][ T121] usb 4-1: Manufacturer: syz [ 106.345031][ T121] usb 4-1: SerialNumber: syz [ 106.436051][ T30] audit: type=1800 audit(1756661289.384:9): pid=6797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.257" name="rnullb0" dev="tmpfs" ino=107 res=0 errno=0 [ 106.574043][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.586551][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.767251][ T6813] process 'syz.0.261' launched './file0' with NULL argv: empty string added [ 106.779210][ T6813] overlayfs: missing 'lowerdir' [ 107.438356][ T6818] netlink: 60 bytes leftover after parsing attributes in process `syz.1.262'. [ 107.479867][ T6816] netlink: 60 bytes leftover after parsing attributes in process `syz.1.262'. [ 107.540281][ T6817] /dev/rnullb0: Can't open blockdev [ 108.116094][ T5865] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 108.269075][ T5865] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.284148][ T5865] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.305814][ T5865] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.318934][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.327787][ T5865] usb 3-1: SerialNumber: syz [ 108.370616][ T6813] kexec: Could not allocate control_code_buffer [ 108.505505][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'. [ 108.545797][ T6824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.264'. [ 108.571176][ T5865] usb 3-1: 0:2 : does not exist [ 108.594633][ T5865] usb 3-1: USB disconnect, device number 11 [ 108.708529][ T121] usb 4-1: USB disconnect, device number 14 [ 108.781244][ T6836] syz.3.268 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 109.131435][ T6841] program syz.2.270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.157281][ T6841] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 109.866085][ T43] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 110.036066][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 110.053428][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.088916][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 110.115749][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.155698][ T43] usb 2-1: Product: syz [ 110.185223][ T43] usb 2-1: Manufacturer: syz [ 110.199486][ T43] usb 2-1: SerialNumber: syz [ 110.238585][ T43] usb 2-1: config 0 descriptor?? [ 110.596020][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 110.736500][ T43] usb 3-1: device descriptor read/64, error -71 [ 110.936145][ T121] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 110.977642][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 111.086230][ T121] usb 4-1: Using ep0 maxpacket: 8 [ 111.098304][ T121] usb 4-1: unable to get BOS descriptor or descriptor too short [ 111.117485][ T121] usb 4-1: config 190 has an invalid descriptor of length 48, skipping remainder of the config [ 111.136180][ T121] usb 4-1: config 190 has 0 interfaces, different from the descriptor's value: 17 [ 111.136462][ T43] usb 3-1: device descriptor read/64, error -71 [ 111.158333][ T121] usb 4-1: New USB device found, idVendor=04ed, idProduct=1f97, bcdDevice=d8.08 [ 111.176213][ T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.194628][ T121] usb 4-1: Product: syz [ 111.203131][ T121] usb 4-1: Manufacturer: syz [ 111.216093][ T121] usb 4-1: SerialNumber: syz [ 111.269316][ T43] usb usb3-port1: attempt power cycle [ 111.431348][ T6858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.441111][ T6858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.638964][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 111.679370][ T43] usb 3-1: device descriptor read/8, error -71 [ 111.891408][ T30] audit: type=1804 audit(1756661294.844:10): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.280" name="rnullb0" dev="tmpfs" ino=107 res=1 errno=0 [ 111.891853][ T6870] MTD: Couldn't look up '/dev/rnullb0': -15 [ 111.926324][ T43] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 111.956821][ T43] usb 3-1: device descriptor read/8, error -71 [ 112.068208][ T43] usb usb3-port1: unable to enumerate USB device [ 112.102023][ T6875] tipc: Started in network mode [ 112.107221][ T6875] tipc: Node identity 000000000000000005, cluster identity 4711 [ 112.392548][ T30] audit: type=1804 audit(1756661295.344:11): pid=6885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.286" name="rnullb0" dev="tmpfs" ino=107 res=1 errno=0 [ 112.623003][ T5960] usb 2-1: USB disconnect, device number 15 [ 112.996085][ T5960] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 113.146001][ T5960] usb 2-1: Using ep0 maxpacket: 32 [ 113.156034][ T5960] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 113.164328][ T5960] usb 2-1: config 0 has no interface number 0 [ 113.183418][ T5960] usb 2-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 113.193172][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.202643][ T5960] usb 2-1: Product: syz [ 113.207816][ T5960] usb 2-1: Manufacturer: syz [ 113.212711][ T5960] usb 2-1: SerialNumber: syz [ 113.219898][ T5960] usb 2-1: config 0 descriptor?? [ 113.227822][ T5960] spcp8x5 2-1:0.191: SPCP8x5 converter detected [ 113.236843][ T5960] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 113.739828][ T5916] usb 2-1: USB disconnect, device number 16 [ 113.757905][ T121] usb 4-1: USB disconnect, device number 15 [ 113.774906][ T5916] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 113.820781][ T5916] spcp8x5 2-1:0.191: device disconnected [ 114.176065][ T121] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 114.337119][ T121] usb 4-1: Invalid ep0 maxpacket: 32 [ 114.451625][ T6930] binder: BINDER_SET_CONTEXT_MGR already set [ 114.459913][ T6930] binder: 6929:6930 ioctl 4018620d 2000000000c0 returned -16 [ 114.486243][ T121] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 114.646793][ T121] usb 4-1: Invalid ep0 maxpacket: 32 [ 114.652436][ T121] usb usb4-port1: attempt power cycle [ 114.776684][ T5916] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 114.816717][ T5865] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 114.922383][ T30] audit: type=1804 audit(1756661297.874:12): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.305" name="rnullb0" dev="tmpfs" ino=107 res=1 errno=0 [ 114.942415][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 114.949538][ T5916] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 114.958269][ T5916] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.969812][ T5865] usb 2-1: Using ep0 maxpacket: 32 [ 114.975205][ T5916] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.988237][ T5916] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.998271][ T5916] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.011896][ T121] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 115.019973][ T5865] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 115.029280][ T5916] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.038549][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.046961][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.058140][ T5865] usb 2-1: config 0 descriptor?? [ 115.068613][ T121] usb 4-1: Invalid ep0 maxpacket: 32 [ 115.076359][ T5865] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 115.207123][ T121] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 115.236618][ T121] usb 4-1: Invalid ep0 maxpacket: 32 [ 115.242241][ T121] usb usb4-port1: unable to enumerate USB device [ 115.264708][ T5916] usb 3-1: usb_control_msg returned -32 [ 115.267236][ T6935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.271199][ T5916] usbtmc 3-1:16.0: can't read capabilities [ 115.282742][ T6935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.736975][ T6962] /dev/rnullb0: Can't lookup blockdev [ 115.767293][ T6964] mmap: syz.0.313 (6964): VmData 37478400 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 116.010323][ T6979] usbtmc 3-1:16.0: usb_clear_halt returned -32 [ 116.196733][ T5865] gspca_vc032x: reg_w err -110 [ 116.201725][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.207658][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.213265][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.221220][ T121] usb 3-1: USB disconnect, device number 16 [ 116.233565][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.252478][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.264635][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.273773][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.279326][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.284957][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.292104][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.298580][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.304086][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.309671][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.315059][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.320779][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.327002][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.332676][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.338280][ T5865] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.344850][ T5865] gspca_vc032x: Unknown sensor... [ 116.350162][ T5865] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 116.775202][ T5960] usb 2-1: USB disconnect, device number 17 [ 117.886429][ T121] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 117.968374][ T30] audit: type=1326 audit(1756661300.924:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.3.333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4ecf8ebe9 code=0x0 [ 117.990660][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.047531][ T121] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 118.056935][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.067830][ T121] usb 3-1: config 0 descriptor?? [ 118.077062][ T121] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 118.126160][ T5865] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 118.275779][ T121] gspca_sn9c2028: read1 error -32 [ 118.282697][ T5865] usb 2-1: Invalid ep0 maxpacket: 16 [ 118.292138][ T121] gspca_sn9c2028: read1 error -32 [ 118.426240][ T5865] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 118.548255][ T121] usb 3-1: USB disconnect, device number 17 [ 118.589528][ T5865] usb 2-1: Invalid ep0 maxpacket: 16 [ 118.609109][ T5865] usb usb2-port1: attempt power cycle [ 118.678120][ T7074] /dev/rnullb0: Can't lookup blockdev [ 118.764599][ T7079] veth1_to_bridge: entered allmulticast mode [ 118.766090][ T30] audit: type=1804 audit(1756661301.714:14): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.338" name="rnullb0" dev="tmpfs" ino=107 res=1 errno=0 [ 118.790399][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.809081][ T7079] veth1_to_bridge: left allmulticast mode [ 118.920254][ T7088] /dev/rnullb0: Can't lookup blockdev [ 119.054621][ T7094] IPVS: set_ctl: invalid protocol: 94 10.1.1.1:20000 [ 119.136046][ T5960] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 119.153671][ T7102] /dev/rnullb0: Can't lookup blockdev [ 119.162432][ T7102] /dev/rnullb0: Can't lookup blockdev [ 119.288636][ T5960] usb 4-1: Using ep0 maxpacket: 32 [ 119.308120][ T5960] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 119.323919][ T5960] usb 4-1: config 0 has no interface number 0 [ 119.343544][ T5960] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 119.360636][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.379873][ T5960] usb 4-1: Product: syz [ 119.389389][ T5960] usb 4-1: Manufacturer: syz [ 119.400749][ T5960] usb 4-1: SerialNumber: syz [ 119.433696][ T5960] usb 4-1: config 0 descriptor?? [ 119.458885][ T5960] smsc95xx v2.0.0 [ 119.668859][ T1217] IPVS: starting estimator thread 0... [ 119.682004][ T5865] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 119.706414][ T5865] usb 2-1: Invalid ep0 maxpacket: 16 [ 119.756237][ T7125] IPVS: using max 41 ests per chain, 98400 per kthread [ 119.860510][ T5960] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 119.861751][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 119.890091][ T5960] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 119.907013][ T5865] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 119.936976][ T5865] usb 2-1: Invalid ep0 maxpacket: 16 [ 119.947739][ T5865] usb usb2-port1: unable to enumerate USB device [ 120.100199][ T7145] netlink: 64 bytes leftover after parsing attributes in process `syz.0.360'. [ 120.114294][ T30] audit: type=1804 audit(1756661303.064:15): pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.360" name="rnullb0" dev="tmpfs" ino=107 res=1 errno=0 [ 120.138700][ T5960] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 120.150470][ T5960] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 120.864311][ T43] usb 4-1: USB disconnect, device number 20 [ 120.963838][ T7177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.406329][ T43] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 121.638274][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 121.647264][ T43] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 121.657293][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.665311][ T43] usb 4-1: Product: syz [ 121.670458][ T43] usb 4-1: Manufacturer: syz [ 121.675097][ T43] usb 4-1: SerialNumber: syz [ 121.686708][ T43] usb 4-1: config 0 descriptor?? [ 121.694899][ T43] gspca_main: sq905-2.14.0 probing 2770:9120 [ 121.800212][ T7199] /dev/rnullb0: Can't lookup blockdev [ 121.859409][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 121.868934][ T7201] IPVS: Error joining to the multicast group [ 121.877615][ T7200] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 121.941375][ T7210] netlink: 40 bytes leftover after parsing attributes in process `syz.0.383'. [ 122.261342][ T43] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 122.275788][ T43] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 122.293705][ T43] usb 4-1: USB disconnect, device number 21 [ 122.498820][ T7250] 9p: Bad value for 'rfdno' [ 122.568624][ T5960] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 123.036188][ T5960] usb 3-1: Using ep0 maxpacket: 8 [ 123.059617][ T5960] usb 3-1: unable to get BOS descriptor or descriptor too short [ 123.081967][ T5960] usb 3-1: config 190 has an invalid descriptor of length 48, skipping remainder of the config [ 123.092814][ T5960] usb 3-1: config 190 has 0 interfaces, different from the descriptor's value: 17 [ 123.094322][ T5934] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 123.124256][ T5960] usb 3-1: New USB device found, idVendor=04ed, idProduct=1f97, bcdDevice=d8.08 [ 123.152876][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.172184][ T30] audit: type=1804 audit(1756661306.124:16): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.397" name="rnullb0" dev="tmpfs" ino=107 res=1 errno=0 [ 123.193040][ T5960] usb 3-1: Product: syz [ 123.215998][ T5960] usb 3-1: Manufacturer: syz [ 123.220671][ T5960] usb 3-1: SerialNumber: syz [ 123.283515][ T5934] usb 2-1: device descriptor read/64, error -71 [ 123.298274][ T7266] /dev/rnullb0: Can't open blockdev [ 123.536789][ T5934] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 123.676233][ T5934] usb 2-1: device descriptor read/64, error -71 [ 123.774936][ T7284] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.796341][ T5934] usb usb2-port1: attempt power cycle [ 123.804965][ T7284] I/O error, dev loop3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.820705][ T7284] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 123.837172][ T7284] I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.849898][ T7284] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 123.871374][ T7284] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 123.879569][ T7284] UDF-fs: Scanning with blocksize 512 failed [ 123.887338][ T7284] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.897996][ T7284] I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.913809][ T7284] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 123.925656][ T7284] I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.937679][ T7284] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 123.948069][ T7284] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 123.959534][ T7284] UDF-fs: Scanning with blocksize 1024 failed [ 123.967840][ T7284] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.979881][ T7284] I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.990929][ T7284] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 124.004170][ T7284] I/O error, dev loop3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.014523][ T7284] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 124.026341][ T7284] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 124.034432][ T7284] UDF-fs: Scanning with blocksize 2048 failed [ 124.041773][ T7284] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.051809][ T7284] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 124.062221][ T7284] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 124.073261][ T7284] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 124.083704][ T7284] UDF-fs: Scanning with blocksize 4096 failed [ 124.092071][ T7284] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 124.136032][ T5934] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 124.167134][ T5934] usb 2-1: device descriptor read/8, error -71 [ 124.426028][ T5934] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 124.456954][ T5934] usb 2-1: device descriptor read/8, error -71 [ 124.519104][ T121] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 124.569008][ T5934] usb usb2-port1: unable to enumerate USB device [ 124.677184][ T121] usb 4-1: Using ep0 maxpacket: 16 [ 124.690360][ T121] usb 4-1: config 0 has an invalid interface number: 180 but max is 0 [ 124.700186][ T121] usb 4-1: config 0 has no interface number 0 [ 124.717890][ T121] usb 4-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 124.727320][ T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.735340][ T121] usb 4-1: Product: syz [ 124.760470][ T121] usb 4-1: Manufacturer: syz [ 124.765316][ T121] usb 4-1: SerialNumber: syz [ 124.786482][ T121] usb 4-1: config 0 descriptor?? [ 124.799507][ T121] usb 4-1: bad CDC descriptors [ 124.838482][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 125.008681][ T7291] /dev/rnullb0: Can't open blockdev [ 125.017318][ T121] usb 4-1: USB disconnect, device number 22 [ 125.262329][ T5960] usb 3-1: USB disconnect, device number 18 [ 125.814385][ T7314] qnx4: no qnx4 filesystem (no root dir). [ 126.082967][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.216019][ T121] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 126.327653][ T43] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 126.386201][ T121] usb 2-1: Using ep0 maxpacket: 32 [ 126.395335][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 126.408772][ T121] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 126.418598][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.426955][ T121] usb 2-1: Product: syz [ 126.431243][ T121] usb 2-1: Manufacturer: syz [ 126.435866][ T121] usb 2-1: SerialNumber: syz [ 126.442384][ T121] usb 2-1: config 0 descriptor?? [ 126.450056][ T121] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 126.461908][ T121] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 126.482608][ T121] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 126.497298][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 126.510925][ T43] usb 3-1: config 13 has an invalid interface number: 113 but max is 3 [ 126.523865][ T43] usb 3-1: config 13 has an invalid interface number: 91 but max is 3 [ 126.541386][ T43] usb 3-1: config 13 has an invalid interface number: 19 but max is 3 [ 126.558539][ T43] usb 3-1: config 13 has no interface number 0 [ 126.565720][ T43] usb 3-1: config 13 has no interface number 2 [ 126.572322][ T43] usb 3-1: config 13 has no interface number 3 [ 126.579541][ T43] usb 3-1: config 13 interface 1 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 126.595297][ T43] usb 3-1: config 13 interface 1 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 126.606695][ T43] usb 3-1: config 13 interface 1 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 126.617438][ T43] usb 3-1: config 13 interface 1 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.627265][ T43] usb 3-1: config 13 interface 113 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 126.638364][ T43] usb 3-1: config 13 interface 113 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 126.649223][ T43] usb 3-1: config 13 interface 91 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 126.706294][ T43] usb 3-1: config 13 interface 91 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 126.717319][ T43] usb 3-1: config 13 interface 91 altsetting 8 endpoint 0x8 has invalid maxpacket 495, setting to 64 [ 126.739442][ T43] usb 3-1: config 13 interface 91 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 126.750321][ T43] usb 3-1: config 13 interface 91 altsetting 8 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 126.761337][ T43] usb 3-1: config 13 interface 91 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 126.772201][ T43] usb 3-1: config 13 interface 91 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 126.782946][ T43] usb 3-1: config 13 interface 91 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 126.795608][ T43] usb 3-1: config 13 interface 19 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 126.806424][ T43] usb 3-1: config 13 interface 19 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 126.818593][ T43] usb 3-1: config 13 interface 19 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 126.837283][ T43] usb 3-1: config 13 interface 19 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 126.851805][ T43] usb 3-1: config 13 interface 19 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 126.867110][ T43] usb 3-1: config 13 interface 19 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 126.891013][ T43] usb 3-1: config 13 interface 19 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 126.909974][ T43] usb 3-1: config 13 interface 19 altsetting 5 has an endpoint descriptor with address 0x59, changing to 0x9 [ 126.925229][ T43] usb 3-1: config 13 interface 19 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 126.938840][ T43] usb 3-1: config 13 interface 19 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 126.950247][ T43] usb 3-1: config 13 interface 19 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 126.962374][ T43] usb 3-1: config 13 interface 19 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 126.977973][ T30] audit: type=1804 audit(1756661309.934:17): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.418" name="rnullb0" dev="tmpfs" ino=107 res=1 errno=0 [ 126.978493][ T43] usb 3-1: config 13 interface 19 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 127.009580][ T43] usb 3-1: config 13 interface 19 altsetting 5 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 127.020586][ T43] usb 3-1: config 13 interface 19 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 127.031863][ T43] usb 3-1: config 13 interface 1 has no altsetting 0 [ 127.038892][ T43] usb 3-1: config 13 interface 113 has no altsetting 0 [ 127.045770][ T43] usb 3-1: config 13 interface 91 has no altsetting 0 [ 127.052717][ T43] usb 3-1: config 13 interface 19 has no altsetting 0 [ 127.061419][ T43] usb 3-1: New USB device found, idVendor=19d2, idProduct=0199, bcdDevice=1d.f2 [ 127.070622][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.078897][ T43] usb 3-1: Product: 줄ꩋ舭뮜蠻狅绑ᵶ홒㗏℞ᐫ䰟混 [ 127.086656][ T43] usb 3-1: Manufacturer: 煱‫ퟺ苮뤐脽墴⛜燐洞餭䵿蛅㸕盤ⴣ╎ꭳ䯶搜෶綖࿲愷떧퓩㫽呛滝떢䱓㩾彅㘯吹펶轇㻋裎퇛Վ¿ӳ邻ᶷ磠戲੿⃩౪碨ᓍ쬰収鿋⅃蕖Ꞗ擲섆镼抅矿윾䃁⽕뒄퀶칱蜴짞谸洵䳽쨍ጚࢬ鵨仰⤦ፂ虴ㅦ៎磪釳䥤즹욝檌ﻉ論봕ꘉ [ 127.121197][ T43] usb 3-1: SerialNumber: 䀁 [ 127.331367][ T7328] openvswitch: netlink: Flow key attr not present in new flow. [ 127.469652][ T43] usbhid 3-1:13.113: couldn't find an input interrupt endpoint [ 127.495443][ T43] usb 3-1: USB disconnect, device number 19 [ 127.567122][ T7354] netlink: 'syz.3.421': attribute type 13 has an invalid length. [ 127.584981][ T7350] netlink: 'syz.3.421': attribute type 1 has an invalid length. [ 127.598584][ T7350] netlink: 'syz.3.421': attribute type 101 has an invalid length. [ 127.609603][ T7350] netlink: 224 bytes leftover after parsing attributes in process `syz.3.421'. [ 127.807753][ T7363] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 127.815390][ T7363] /dev/rnullb0: Can't open blockdev [ 128.087765][ T7372] kernel read not supported for file /blkio.bfq.io_wait_time_recursive (pid: 7372 comm: syz.2.428) [ 128.102251][ T30] audit: type=1800 audit(1756661311.054:18): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.428" name="blkio.bfq.io_wait_time_recursive" dev="mqueue" ino=13726 res=0 errno=0 [ 128.468105][ T7380] /dev/rnullb0: Can't lookup blockdev [ 128.764837][ T7396] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 128.787669][ T7396] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 128.802194][ T7403] netlink: 104 bytes leftover after parsing attributes in process `syz.2.438'. [ 128.820195][ T121] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 128.852974][ T7403] overlay: ./file0 is not a directory [ 128.860927][ T7403] /dev/rnullb0: Can't open blockdev [ 128.976019][ T121] usb 4-1: Using ep0 maxpacket: 8 [ 128.982944][ T121] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.000968][ T121] usb 4-1: config 190 has an invalid descriptor of length 48, skipping remainder of the config [ 129.011576][ T121] usb 4-1: config 190 has 0 interfaces, different from the descriptor's value: 17 [ 129.027767][ T121] usb 4-1: New USB device found, idVendor=04ed, idProduct=1f97, bcdDevice=d8.08 [ 129.039588][ T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.048709][ T121] usb 4-1: Product: syz [ 129.053194][ T121] usb 4-1: Manufacturer: syz [ 129.061606][ T121] usb 4-1: SerialNumber: syz [ 129.908552][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.018606][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.144118][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 130.656039][ T5934] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 130.813620][ T5934] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 130.835596][ T5934] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 130.866107][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.874277][ T5934] usb 3-1: Product: syz [ 130.892921][ T5934] usb 3-1: Manufacturer: syz [ 130.899401][ T5934] usb 3-1: SerialNumber: syz [ 130.915597][ T5934] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 130.939407][ T5916] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 131.074297][ T7456] /dev/rnullb0: Can't lookup blockdev [ 131.155814][ T7448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.188484][ T7448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.206322][ T43] usb 3-1: USB disconnect, device number 20 [ 131.310752][ T7464] can0: slcan on ttyS3. [ 131.379005][ T7473] tmpfs: Bad value for 'mpol' [ 131.379400][ T7464] can0 (unregistered): slcan off ttyS3. [ 131.500996][ T7464] can0: slcan on ttyS3. [ 131.589386][ T121] usb 4-1: USB disconnect, device number 23 [ 131.651304][ T7473] tmpfs: Bad value for 'mpol' [ 131.802103][ T7473] can0 (unregistered): slcan off ttyS3. [ 131.835511][ T7497] erofs (device nullb0): cannot find valid erofs superblock [ 131.997271][ T5916] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 132.008238][ T5916] ath9k_htc: Failed to initialize the device [ 132.016006][ T121] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 132.024648][ T43] usb 3-1: ath9k_htc: USB layer deinitialized [ 132.050743][ T7509] /dev/rnullb0: Can't open blockdev [ 132.109821][ T7519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.123312][ T7519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.178052][ T121] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.196159][ T121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.279125][ T121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.289333][ T121] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 132.302957][ T121] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 132.312430][ T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.326079][ T43] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 132.326410][ T121] usb 4-1: config 0 descriptor?? [ 132.469073][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 132.486032][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 132.493217][ T43] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 132.504180][ T43] usb 3-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice= 1.08 [ 132.513797][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.522698][ T43] usb 3-1: Product: syz [ 132.527264][ T43] usb 3-1: Manufacturer: syz [ 132.532063][ T43] usb 3-1: SerialNumber: syz [ 132.549135][ T43] mos7840 3-1:1.0: missing endpoints [ 132.755702][ T121] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 132.766943][ T121] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input13 [ 132.841753][ T7540] /dev/rnullb0: Can't open blockdev [ 132.860966][ T121] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 132.914747][ T7544] /dev/rnullb0: Can't open blockdev [ 132.960606][ T7546] program syz.1.477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.005731][ T121] usb 4-1: USB disconnect, device number 24 [ 133.118833][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.125353][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.242248][ T7553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.285882][ T7556] ------------[ cut here ]------------ [ 133.291575][ T7556] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#0: syz.1.481/7556 [ 133.300317][ T7556] Modules linked in: [ 133.304337][ T7556] CPU: 0 UID: 0 PID: 7556 Comm: syz.1.481 Not tainted syzkaller #0 PREEMPT(full) [ 133.313789][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.323926][ T7556] RIP: 0010:path_noexec+0x1af/0x200 [ 133.329318][ T7556] Code: 02 31 ff 48 89 de e8 00 c0 88 ff d1 eb eb 07 e8 17 bb 88 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 d8 f1 50 09 cc e8 02 bb 88 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 133.349537][ T7556] RSP: 0018:ffffc90003607bd8 EFLAGS: 00010283 [ 133.355624][ T7556] RAX: ffffffff823813ce RBX: ffff8880567f7900 RCX: 0000000000080000 [ 133.364241][ T7556] RDX: ffffc9000be79000 RSI: 0000000000000067 RDI: 0000000000000068 [ 133.372455][ T7556] RBP: 0000000000080000 R08: ffff888025b60000 R09: 0000000000000003 [ 133.380636][ T7556] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000028011 [ 133.388974][ T7556] R13: 1ffff920006c0f90 R14: 0000000000000000 R15: dffffc0000000000 [ 133.397129][ T7556] FS: 00007f34bf08b6c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 133.406399][ T7556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.413050][ T7556] CR2: 0000200000002080 CR3: 000000004090c000 CR4: 00000000003526f0 [ 133.421100][ T7556] Call Trace: [ 133.424430][ T7556] [ 133.427416][ T7556] do_mmap+0xa43/0x10d0 [ 133.431621][ T7556] ? __pfx_futex_wait+0x10/0x10 [ 133.436787][ T7556] ? __pfx_do_mmap+0x10/0x10 [ 133.441418][ T7556] ? down_write_killable+0x178/0x230 [ 133.447406][ T7556] ? __pfx_down_write_killable+0x10/0x10 [ 133.453578][ T7556] ? common_file_perm+0x1b5/0x230 [ 133.458898][ T7556] vm_mmap_pgoff+0x2a6/0x4d0 [ 133.463573][ T7556] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 133.468816][ T7556] ? lock_release+0x4b/0x3e0 [ 133.473545][ T7556] ? __se_sys_futex+0x36f/0x400 [ 133.478597][ T7556] ? __fget_files+0x2a/0x420 [ 133.483437][ T7556] ? __fget_files+0x2a/0x420 [ 133.488215][ T7556] ksys_mmap_pgoff+0x51f/0x760 [ 133.493463][ T7556] do_syscall_64+0xfa/0xfa0 [ 133.498136][ T7556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.504227][ T7556] ? clear_bhb_loop+0x60/0xb0 [ 133.508984][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.514916][ T7556] RIP: 0033:0x7f34be18ebe9 [ 133.519624][ T7556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.539424][ T7556] RSP: 002b:00007f34bf08b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 133.548667][ T7556] RAX: ffffffffffffffda RBX: 00007f34be3c5fa0 RCX: 00007f34be18ebe9 [ 133.557235][ T7556] RDX: 0000000000000002 RSI: 0000000000003000 RDI: 0000200000978000 [ 133.565373][ T7556] RBP: 00007f34be211e19 R08: 0000000000000003 R09: 0000000000000000 [ 133.573548][ T7556] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 133.581654][ T7556] R13: 00007f34be3c6038 R14: 00007f34be3c5fa0 R15: 00007ffd4d8bc838 [ 133.589731][ T7556] [ 133.592892][ T7556] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 133.600172][ T7556] CPU: 0 UID: 0 PID: 7556 Comm: syz.1.481 Not tainted syzkaller #0 PREEMPT(full) [ 133.609397][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.619481][ T7556] Call Trace: [ 133.622808][ T7556] [ 133.625846][ T7556] dump_stack_lvl+0x99/0x250 [ 133.630458][ T7556] ? __asan_memcpy+0x40/0x70 [ 133.635051][ T7556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.640264][ T7556] ? __pfx__printk+0x10/0x10 [ 133.644883][ T7556] vpanic+0x281/0x750 [ 133.648882][ T7556] ? __pfx__printk+0x10/0x10 [ 133.653584][ T7556] ? __pfx_vpanic+0x10/0x10 [ 133.658260][ T7556] ? is_bpf_text_address+0x292/0x2b0 [ 133.663546][ T7556] ? is_bpf_text_address+0x26/0x2b0 [ 133.668774][ T7556] panic+0xb9/0xc0 [ 133.672511][ T7556] ? __pfx_panic+0x10/0x10 [ 133.677020][ T7556] __warn+0x334/0x4c0 [ 133.681010][ T7556] ? path_noexec+0x1af/0x200 [ 133.685606][ T7556] ? path_noexec+0x1af/0x200 [ 133.690204][ T7556] report_bug+0x2be/0x4f0 [ 133.694535][ T7556] ? path_noexec+0x1af/0x200 [ 133.699131][ T7556] ? path_noexec+0x1af/0x200 [ 133.703727][ T7556] ? path_noexec+0x1b1/0x200 [ 133.708335][ T7556] handle_bug+0x84/0x160 [ 133.712585][ T7556] exc_invalid_op+0x1a/0x50 [ 133.717094][ T7556] asm_exc_invalid_op+0x1a/0x20 [ 133.721944][ T7556] RIP: 0010:path_noexec+0x1af/0x200 [ 133.727197][ T7556] Code: 02 31 ff 48 89 de e8 00 c0 88 ff d1 eb eb 07 e8 17 bb 88 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 d8 f1 50 09 cc e8 02 bb 88 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 133.746986][ T7556] RSP: 0018:ffffc90003607bd8 EFLAGS: 00010283 [ 133.753076][ T7556] RAX: ffffffff823813ce RBX: ffff8880567f7900 RCX: 0000000000080000 [ 133.761148][ T7556] RDX: ffffc9000be79000 RSI: 0000000000000067 RDI: 0000000000000068 [ 133.769404][ T7556] RBP: 0000000000080000 R08: ffff888025b60000 R09: 0000000000000003 [ 133.777476][ T7556] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000028011 [ 133.785454][ T7556] R13: 1ffff920006c0f90 R14: 0000000000000000 R15: dffffc0000000000 [ 133.793469][ T7556] ? path_noexec+0x1ae/0x200 [ 133.798077][ T7556] ? path_noexec+0x1ae/0x200 [ 133.802674][ T7556] do_mmap+0xa43/0x10d0 [ 133.806846][ T7556] ? __pfx_futex_wait+0x10/0x10 [ 133.811901][ T7556] ? __pfx_do_mmap+0x10/0x10 [ 133.816624][ T7556] ? down_write_killable+0x178/0x230 [ 133.821910][ T7556] ? __pfx_down_write_killable+0x10/0x10 [ 133.827714][ T7556] ? common_file_perm+0x1b5/0x230 [ 133.832750][ T7556] vm_mmap_pgoff+0x2a6/0x4d0 [ 133.837350][ T7556] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 133.842466][ T7556] ? lock_release+0x4b/0x3e0 [ 133.847060][ T7556] ? __se_sys_futex+0x36f/0x400 [ 133.852012][ T7556] ? __fget_files+0x2a/0x420 [ 133.856618][ T7556] ? __fget_files+0x2a/0x420 [ 133.861214][ T7556] ksys_mmap_pgoff+0x51f/0x760 [ 133.865988][ T7556] do_syscall_64+0xfa/0xfa0 [ 133.870584][ T7556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.876774][ T7556] ? clear_bhb_loop+0x60/0xb0 [ 133.881538][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.887442][ T7556] RIP: 0033:0x7f34be18ebe9 [ 133.891859][ T7556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.911722][ T7556] RSP: 002b:00007f34bf08b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 133.920330][ T7556] RAX: ffffffffffffffda RBX: 00007f34be3c5fa0 RCX: 00007f34be18ebe9 [ 133.928302][ T7556] RDX: 0000000000000002 RSI: 0000000000003000 RDI: 0000200000978000 [ 133.936310][ T7556] RBP: 00007f34be211e19 R08: 0000000000000003 R09: 0000000000000000 [ 133.944391][ T7556] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 133.952631][ T7556] R13: 00007f34be3c6038 R14: 00007f34be3c5fa0 R15: 00007ffd4d8bc838 [ 133.960754][ T7556] [ 133.964115][ T7556] Kernel Offset: disabled [ 133.968441][ T7556] Rebooting in 86400 seconds..