last executing test programs: 12.205887542s ago: executing program 2 (id=2280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000000c0)={0x6, 0x1, 0x4, 0x7, 0x4, 0x40}, 0xc) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000000)={0x184a, 0xb, [{0x1, 0x1}, {0x2}, {0xa}, {0x5, 0x1}, {0x4}, {0x6, 0x1}, {0x6, 0x1}, {0xb}, {0xc, 0x1}, {0x3, 0x1}, {0xe}]}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x144, 0x10, 0x713, 0x70bd26, 0x4, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@remote, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, 0x0) unshare(0x40020000) 10.982043836s ago: executing program 2 (id=2282): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000240)=[{}, {}], &(0x7f0000000000), 0x0, 0x2, 0xb}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) connect$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @remote, 0x3}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000fc0)={'gretap0\x00', 0x0, 0x7800, 0x1, 0x3, 0x6, {{0x21, 0x4, 0x0, 0x0, 0x84, 0x67, 0x0, 0x1d, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0x1f, 0x59, [@multicast1, @remote, @broadcast, @empty, @multicast1, @loopback, @multicast2]}, @end, @noop, @timestamp_prespec={0x44, 0x14, 0x92, 0x3, 0x5, [{@rand_addr=0x64010102, 0xc}, {@rand_addr=0x64010100, 0x10000}]}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x9, "f844e723656313"}, {0x1, 0xc, "4c539f1c538984b96f0a"}, {0x5, 0xf, "5966aa76a3aef47b4261172861"}, {0x5, 0x3, "bc"}]}, @rr={0x7, 0xb, 0xd6, [@multicast1, @broadcast]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001080)=@newchain={0x44, 0x64, 0x214, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0x7}, {0x5, 0xfffd}, {0x6, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x73, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0xbc4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20048044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x1}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000200)={{0x77359400}, 0x11, 0xae, 0x7fffffff}, 0xffffffe7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) 10.88580787s ago: executing program 0 (id=2283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280), 0x0) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280), 0x0) accept4(r4, 0x0, 0x0, 0x800) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba1282", 0x12}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) pipe(&(0x7f00000001c0)) close(0x4) (async) close(0x4) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, &(0x7f0000000380)={0x40, 0x21, 0x67, {0x67, 0x4, "d56ed8b3e84a91253dc6450808b22bb492e09a1f88c577f8a6bf3316a3917a1cee9ecfc94818339d521181244d0bfd35ebc1543c4fff4c77ca7f0547c5fd3d58678600f860d4a9c9eef53979500764598b7625d7d2d18a5f91a7a8da2d14cd3bba3c341291"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000010) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e501020301090224000100000000090400"], 0x0) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r8, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r8, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 9.372048013s ago: executing program 1 (id=2286): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in=@empty, 0xfffe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x800000000}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x2b}, 0x0, @in=@private=0xa010100, 0x40000000}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) renameat2(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x4) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0) close(r5) sendmsg$nl_xfrm(r5, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7f) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x2, 0x4, 0x3ce}, &(0x7f0000000040), 0x0) dup(0xffffffffffffffff) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x180, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x1, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd}, {0x0, 0x20000}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x8d, 0x14, {{'sm3\x00'}, 0x208, 0x0, "ab84411f518dc9d5565b9e05de67830aeb529f334e285efe3786823a0a1e08b53bec30240d4d6f58f05cd36e941758cf60d4c5a818aca82c12697c43daf8000000"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$KDSIGACCEPT(r7, 0x541b, 0x1f) 8.817731971s ago: executing program 0 (id=2288): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) io_setup(0x81, &(0x7f0000001440)=0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x2461, &(0x7f0000000380)={0x0, 0xddec, 0x10100, 0x3}, &(0x7f0000002080)=0x0, &(0x7f0000002100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x2020) r9 = socket$inet6(0xa, 0x80002, 0x0) r10 = fcntl$dupfd(r9, 0x2, 0xffffffffffffffff) splice(r8, 0x0, r10, 0x0, 0x2000, 0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x800, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.395719598s ago: executing program 0 (id=2291): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getnetconf={0x14, 0x52, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000804) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 7.142444121s ago: executing program 0 (id=2294): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000020afd000000000000000000020000090900010073797a30"], 0x48}, 0x1, 0x0, 0x0, 0x4048004}, 0x84) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) r4 = syz_clone(0x840100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x9, r4, 0x6, 0x1) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc}) socket$kcm(0xa, 0x2, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 6.688973126s ago: executing program 1 (id=2296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = socket(0x2b, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x2, 0x0, 0x4}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x301, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0xbc, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x88, 0x2, [@TCA_MATCHALL_ACT={0x84, 0x2, [@m_gact={0x80, 0x13, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x3ff, 0x20000008, 0x6, 0x2}}]}, {0x3a, 0x6, "9099a2cff108c407cfd4818fbcca34b9e28478b6ec217d058bf53f151b06a3e3fc172d03869f1651f0cbd16ddb8bfc4d4e2b92fd4267"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x3) 5.537743956s ago: executing program 4 (id=2299): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @rand_addr=' \x01\x00', 0x400}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) socket$rxrpc(0x21, 0x2, 0xa) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x1}, 0x0, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0], 0x118}, 0x1, 0x0, 0x0, 0x20000010}, 0x8041) timerfd_create(0x8, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) 4.892907748s ago: executing program 3 (id=2301): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) io_setup(0x81, &(0x7f0000001440)) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x2461, &(0x7f0000000380)={0x0, 0xddec, 0x10100, 0x3}, &(0x7f0000002080)=0x0, &(0x7f0000002100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) r8 = socket$inet6(0xa, 0x80002, 0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) splice(r7, 0x0, r9, 0x0, 0x2000, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 4.695941591s ago: executing program 1 (id=2302): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x50c400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480), 0x0}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000009f80)=[{{&(0x7f0000000480)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)=""/48, 0x30}], 0x1, &(0x7f0000000580)=""/44, 0x2c}, 0x101}, {{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001940)=""/240, 0xf0}, 0x1}, {{&(0x7f0000001a40)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/82, 0x52}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/215, 0xd7}, {&(0x7f0000003c40)=""/253, 0xfd}, {&(0x7f0000003d40)=""/140, 0x8c}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/140, 0x8c}, {&(0x7f0000004ec0)=""/4096, 0x1000}], 0x9, &(0x7f0000005f80)=""/211, 0xd3}, 0x7}, {{&(0x7f0000006080)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000006240)=[{&(0x7f0000006100)=""/41, 0x29}, {&(0x7f0000006140)=""/254, 0xfe}, {&(0x7f00000066c0)=""/4096, 0x1000}], 0x3, &(0x7f0000006280)=""/172, 0xac}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000008740)=[{&(0x7f0000006340)=""/128, 0x80}, {&(0x7f00000063c0)=""/116, 0x74}, {&(0x7f0000006440)=""/23, 0x17}, {&(0x7f0000006480)=""/159, 0x9f}, {&(0x7f00000076c0)=""/4096, 0x1000}, {&(0x7f0000006540)=""/248, 0xf8}, {&(0x7f00000086c0)=""/110, 0x6e}], 0x7, &(0x7f00000087c0)=""/97, 0x61}, 0x366}, {{&(0x7f0000008840)=@xdp, 0x80, &(0x7f0000008c00)=[{&(0x7f00000088c0)=""/255, 0xff}, {&(0x7f0000006640)=""/40, 0x28}, {&(0x7f00000089c0)=""/181, 0xb5}, {&(0x7f0000008a80)=""/252, 0xfc}, {&(0x7f0000008b80)=""/121, 0x79}], 0x5, &(0x7f0000008c80)=""/112, 0x70}, 0x1db3}, {{&(0x7f0000008d00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000008d80), 0x0, &(0x7f0000008dc0)=""/79, 0x4f}, 0x2}, {{&(0x7f0000008e40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000009ec0)=[{&(0x7f0000008ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000009f00)=""/113, 0x71}, 0x8}], 0x8, 0x40012102, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0xa735bdabbca11acf) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000004000000dd00f89b36249481e66700000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x835, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x400d0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='host1x_syncpt_wait_check\x00', r4, 0x0, 0x4}, 0x18) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 4.68460094s ago: executing program 0 (id=2303): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='bond0\x00'}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f00000005c0)={0x48, 0x8, r4, 0x0, 0x3, 0x1, &(0x7f0000000500)="9c", 0x5}) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="73d0", 0x2}], 0x1}, 0x4000000) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x10002, &(0x7f0000000180)={0x11, 0x15, r5, 0x1, 0x9, 0x6, @random="cda1283b4a65"}, 0x14) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c200090588df46"], 0x0) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "f7484db7", {0x3, 0x0, 0x0, 0x5, 0x0, 0x5, 0x6}}) r8 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@bcast, @remote, @rose, @bcast, @rose, @rose]}, &(0x7f0000000080)=0x48, 0x80800) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xf0, 0xe, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x6, 0xff, 0x1, {0x22, 0xd61}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x4, 0x4}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x3, 0x9, 0x4, 0x20, 0x2}, 0x2a, &(0x7f0000000240)={0x5, 0xf, 0x2a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x0, 0x9, 0x401}, @generic={0x18, 0x10, 0x3, "fc51eefa9fcf2ff32e1dfe04d2d92052a31c8a8e5d"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x437}}, {0x38, &(0x7f00000002c0)=@string={0x38, 0x3, "e7820c7b44849a0913bb9533a8fb8215fafde9f38e7bbb80b1532aff536ae4435a968c70a3e33b70e1e44b16164090914d9b8cff4857"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x809}}]}) setsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f00000000c0)=0x37c5, 0x4) 4.609998343s ago: executing program 3 (id=2304): r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f00000000c0)=0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0xa0840) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000280)={0x5, 0x8, [0x2, 0x3ff]}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4388) syz_open_dev$mouse(&(0x7f0000000080), 0xc13, 0x6cac45) 4.543867204s ago: executing program 3 (id=2305): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="280e6e0edcb0fe1be99820080000000000000001020000000000002778b2abcf5c1e9061163eccc679d6"], 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000300)=0x60) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x1, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xbc, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0xf, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0xe, 0x9, 'y'}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x1, 0x5, 0xbc, "613c3b14d1caf5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x8, 0x4, {0x7, 0x25, 0x1, 0x80, 0x6, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2, 0x9, "222b7773c4f7"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3, 0x2, 0x6, 'W'}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x6, 0xf, "f35f3244"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xf, 0x4, 0x8a, 0x51, "7cc78e", "f2f71d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0xd, 0x4, {0x7, 0x25, 0x1, 0x0, 0x7}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0xe, 0x8, 0x4b, 0x8, 0x6}, 0xa8, &(0x7f00000006c0)=ANY=[@ANYBLOB="050fa800039510014e867fcd52eb4e132255e5f22cab4f95f29d4d0502e7a9c724484a9d9cd69572cb001f70ec27622e9314de17e9e6a33e755145775610c227f948a1afa026d94f97d36f417459936fe65941d6cba82ef9aee88ddff6c360897e69cbcaa495f8814bbb050913ab0c611f36063b3a32f41293ad840a8f2a63fd91a302532b6d07db097f024ac4f872e97f723e84ded13d66ba5007100204e4010007100218e57f0089e22533451365c82c4fe69b848f1a60bb5a68dc5d96635041a1f69bcc236ca2ecb37262081fa9bf2f9f60670bcb400104601420dcfa1990913e754f6a399ec0ca5c59e0"], 0x2, [{0xa6, &(0x7f00000002c0)=@string={0xa6, 0x3, "b80e2e376519e0dac0c359bfe0c2df75020e4544c0d7d9d369a6dd751a9d05728905e452035261a82318059308042d08e1695957997b73ea8bb4a63e4efabe2ea9b312ebb95c4ecb0d1fc031f4ebda04fd9c80cdc7ec1a5729e25fba5d3a81cc7fadeda9292d453395abd6d6899971cd1ed34864c66279c82df62bac3d4a9b6e6d8b9d283f209e2a4f403b89302d6c1da2ac5218f07a7620f466d7b6aa12b0c974a15c6a"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40f}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x2, 0x802, 0x3865, 0x8, 0x401dfb, 0x43, 0x5, 0x65cf, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.827820352s ago: executing program 3 (id=2306): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) r1 = eventfd2(0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYBLOB="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"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000000)=0x8000, 0x4) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$zero(0xffffffffffffff9c, 0x0, 0x101440, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[], 0x0}, 0x94) 3.733753374s ago: executing program 1 (id=2307): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000004c00), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x40184152, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000440)={0x0, @win={{0x8, 0x1, 0x5, 0xb}, 0x3, 0x0, &(0x7f00000002c0)={{0x4, 0xfffffffe, 0x3, 0x8}, &(0x7f0000000100)={{0xe0, 0x4, 0x4, 0x4d3}}}, 0xf1, &(0x7f0000000340)="9672b684a9c525e920cfd6b37fbd90000e7f56517305ee8ff32de84a37796b5506ca40cc11f43a7d480e0f3f629e95bdae75b7649e20bad29220f7d6ef11fc71c5a9797015d9be6e07a91057f0d2c4e74c4bb0d55707e1b836d523637db23963ea5c9db3e522d158e5419e5d96c242a782fd6be5d183285c444c76b6b87293c8101f0e80581abcd41ebf77381c75d232475c609ae8978f57d31fa4033bce563dcbed5679e249daa6ce915edca823f4849b47972129f01b1ae9936e212a9aee6a8dad8b0478ebed8b7a831b", 0x5}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.716139615s ago: executing program 1 (id=2308): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/icmp6\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000002c0)={{0x0, 0x7, 0xfffffffffffffff8, 0x4, 0x1, 0x1ff, 0x401, 0x2, 0x7, 0x7ff, 0xfff, 0x2, 0x1, 0xfff, 0x997}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000012c0)={r2, r3, "7969ac368ddfbf56f70c8d9420bf3b2fc24c1c0f52c78ba4c0fbe72d2811c96c9f1f465147ca0e65bd835ee47303ec74fc0cafe765e23f80d6a06536536901b70e71fc20f67b1e9cf7faf7d81c21becb13bfa5b683ea19227f2f35fc891fb66c38aeaccde8365220e6217d24cbd4a080e516203161b9a95799ed85b86fd359db6e4326d00cdb0834f871c53d91b94c5ba2bdeed2d71a466b61ab92a97b71a6e501ec35164bc94a833d1b9909df32bf0c10eb48aa9e8fe8af8808434ed8cd9a748730089db1a012ad876d80aa625eeb3e72d3b16b9c3943b027dff2cd4ff4bc526e65b6f44019ec9cb6c579f49938f0bacaa26a3228d1ecfae0d10aa942da54ac", "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"}) clock_gettime(0x0, &(0x7f0000002340)={0x0, 0x0}) epoll_pwait2(r1, &(0x7f00000022c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000002380)={r4, r5+10000000}, &(0x7f00000023c0)={[0xffffffff]}, 0x8) recvmmsg(r1, &(0x7f0000004e80)=[{{&(0x7f0000002400)=@ax25={{0x3, @bcast}, [@null, @default, @bcast, @null, @default, @default, @null, @rose]}, 0x80, &(0x7f0000003640)=[{&(0x7f0000002480)=""/8, 0x8}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/212, 0xd4}, {&(0x7f00000035c0)=""/89, 0x59}], 0x4, &(0x7f0000003680)=""/8, 0x8}, 0x6}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000036c0)=""/50, 0x32}, {&(0x7f0000003700)}, {&(0x7f0000003740)=""/5, 0x5}, {&(0x7f0000003780)=""/246, 0xf6}, {&(0x7f0000003880)=""/103, 0x67}, {&(0x7f0000003900)=""/172, 0xac}], 0x6, &(0x7f0000003a40)=""/80, 0x50}, 0x400}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003ac0)=""/177, 0xb1}, {&(0x7f0000003b80)=""/108, 0x6c}, {&(0x7f0000003c00)=""/125, 0x7d}, {&(0x7f0000003c80)=""/242, 0xf2}, {&(0x7f0000003d80)=""/86, 0x56}], 0x5, &(0x7f0000003e80)=""/247, 0xf7}, 0x5}, {{&(0x7f0000003f80)=@ieee802154, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004000)=""/34, 0x22}, {&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/225, 0xe1}, {&(0x7f0000004240)=""/174, 0xae}, {&(0x7f0000004300)=""/148, 0x94}], 0x5}, 0x40}, {{&(0x7f0000004440)=@un=@abs, 0x80, &(0x7f0000004600)=[{&(0x7f00000044c0)=""/86, 0x56}, {&(0x7f0000004540)}, {&(0x7f0000004580)=""/127, 0x7f}], 0x3, &(0x7f0000004640)=""/244, 0xf4}, 0x3}, {{&(0x7f0000004740)=@un=@abs, 0x80, &(0x7f0000004b40)=[{&(0x7f00000047c0)=""/113, 0x71}, {&(0x7f0000004840)=""/57, 0x39}, {&(0x7f0000004880)=""/145, 0x91}, {&(0x7f0000004940)=""/55, 0x37}, {&(0x7f0000004980)=""/154, 0x9a}, {&(0x7f0000004a40)=""/70, 0x46}, {&(0x7f0000004ac0)=""/76, 0x4c}], 0x7, &(0x7f0000004bc0)=""/32, 0x20}}, {{&(0x7f0000004c00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004c80)=""/163, 0xa3}], 0x1, &(0x7f0000004d80)=""/229, 0xe5}, 0x6}], 0x7, 0x20002, &(0x7f0000005040)={0x77359400}) cachestat(r1, &(0x7f0000005080)={0x7, 0x50c}, &(0x7f00000050c0), 0x0) r6 = signalfd(r1, &(0x7f0000005100), 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000005140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000064c0)={r6, 0x0, 0x83, 0x80, &(0x7f0000005340)="b3a181637d79794825da9fa5cc53ff7891d9bf3fb313d5d0b4b38269958f37388b2dfb0e085296a90d1bc956155e5173dac838f56ca743ac0310b9169fa3154df9fbf381f2fcd70e3a93784d981ca60bf64912c85a1d2c358a46cf014a32f8caea2adb7197c26760eab0514a4bd25abd0ea5123e733ea2d64411fd6a60a35cd75ae080", &(0x7f0000005400)=""/128, 0x1, 0x0, 0x6, 0x1000, &(0x7f0000005480)="d6956e9a2c8e", &(0x7f00000054c0)="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", 0x2, 0x0, 0x3}, 0x50) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timer_create(0x5, &(0x7f0000006700)={0x0, 0x3c, 0x1, @thr={&(0x7f0000006540)="932ec3571a66c80523179c9806be20a2b4432adc6bd398c696b806b8aedd3f5ec81a913006638a46d57966b7552bd98a1185059656564c85b1028d142b3b5e5a9364ef0e08f096df675507acfd028ae149979dbb438b829f3f083098b3e8231a693c27b4f5ac6055c019a554b33f3d50f59d70a3af6132465de7a04bebc482e07b6fcaa9b17ce3f12f0bc0aba5e6934bba4042d3770ed79570867c64eb960ae388b8cf3edef9e053e41b7ffc1b", &(0x7f0000006600)="97af43c382bb663b54a829cb62f7d259b5653cb22cba329d4e0d0b04cf9f0a3e0facfde2c67074c2c7a220797ef96eeb4a3618dcebf07ba399dacc933a67f0ff9560f7327c4e7466d170b30dbb1ec28b07a9e872c7a3ec2f960bff2a984798642112c7ab819567c0f1101cb1f3c003646e5cfc148e867573fb32dd5fd262e83822dbf0be7e6e89d8b151750df2ac81ab140673900afe7de82fb156a3063dcd93aeae0de4e7b2fed86c52f30e2331480743a60c113410e657fff5d7940cadb4f8ea88d71dc789692f1b532fe539b1400321f807ac62839b3bf245d3c1c759051661fed738028c866da665"}}, &(0x7f0000006740)=0x0) timer_settime(r8, 0x0, &(0x7f0000006780)={{}, {0x0, 0x989680}}, &(0x7f00000067c0)) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000006800)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000006840)={0x28, 0x4, r9, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006880)) close(r7) write$FUSE_GETXATTR(r6, &(0x7f00000068c0)={0x18, 0x0, 0x0, {0xa10}}, 0x18) r10 = accept$unix(r1, &(0x7f0000006900), &(0x7f0000006980)=0x6e) ioctl$FS_IOC_FSGETXATTR(r10, 0x801c581f, &(0x7f00000069c0)={0x4, 0x2, 0x100, 0x3, 0xfff}) read$eventfd(r6, &(0x7f0000006a00), 0x8) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r10, &(0x7f0000006a40)={0x50000002}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000006a80)=0x5) syz_usb_connect(0x0, 0x617, &(0x7f0000006ac0)={{0x12, 0x1, 0x310, 0x48, 0x76, 0xd7, 0x10, 0xbda, 0x8186, 0x3f59, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x605, 0x1, 0x6, 0x8, 0x50, 0x9, [{{0x9, 0x4, 0x42, 0x3, 0x10, 0xff, 0xff, 0xff, 0xf, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "e047e215"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x75, 0x5}, {0x6, 0x24, 0x1a, 0x9, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x3356, 0x0, 0x3, 0xff, 0x4, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x8, 0x0, 0x7, 0xfff8, 0xf8}, @obex={0x5, 0x24, 0x15, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xbe, 0x0, 0xf}, @obex={0x5, 0x24, 0x15, 0xf}, @obex={0x5, 0x24, 0x15, 0x6}]}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x6}, [@mixer_unit={0xa, 0x24, 0x4, 0x3, 0xbc, "c4017aa3ac"}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x8, 0x1, "0eb6aad5"}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x6, 0x3, 0x9, 0x7, 0x2}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x5, "f2"}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x3, 0x4, [0x9, 0x5, 0x3, 0x3]}]}], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x2, 0x5, 0x1}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0xff, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x202}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x2, 0x5, 0x55, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5}, @generic={0xe6, 0x0, "24a48b22e4d431740fab9e5a1dc437be42801baa231242c714a7542072e2ed79c3bad440c88d6bef75ba9f30ba2cb09c71c87650046dbbfb827c51d94726c8572d3745e9aa8edc1993b7e23b31912e6b7678fb9cbc0a3a31edf573bf8fb370178d94cfb2ac0ec60e2f3fcc0a5836285ad939b7a484a9a1c24ec9857dbe77c4ae7e1b764b7a0c8c253c4841cc9081282260e1f1c3f107560912a8fa11ba6d5d289d73273d6994a8b5ae8b574db900bbad9a073f99a8e95373875bd0db538f7d44c4e7a61763963163e40881ee237bda097fb769c6a71797e8327cef1672d0754cc4598b64"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x7, 0xfa, 0x1, [@generic={0x79, 0xe, "685822cc06233a2bee1d1c3f31f9f0a2ed45491d41b4c685c5adcb731511327f56e04a89a139b8a334325d1a443244314bbb8c8a925add3b9d4e3460edfe0632bc762529e49658c59adf643fe2694c8dae5d2c9007f6c7f73c22214d93db879af2f9f88603c14cef59025153b471adcb841e1d100ba833"}, @generic={0xfd, 0x11, "95642dedac217a02fdfc55640c3507a7aa701f8a761a9b5232b338bbabd9974ffade1e1681b440f34866227975783a406a21efcf010d4f7dcae2949ec417cb307e730e49d9e25f62d40a7fee71060461471325e9edb48b08b8f5a0f4b825fa4de11b9774939d59ba27075e2de59a27ccaf5fd7e25ed7eaf583891444910be321ec71ed8daee1e62603bc4705c368110c6d66825625c0c345e25503e052c9a9d209c55be99aa0c5317e21ef9f820156de6e950725b62535c930106e6cc808f942bf981b5862eea882b375c6fe77516d505b9ec527a757bf97fbe93e6b8724b79bc19c5afc86aecc2e853abc3ecb71a61d4fae994e18f8e5afc6b213"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x6, 0x9, 0x8, [@generic={0x58, 0xa, "e4c13e2701c5a7abc9bea92b335767e3d281e7d492d51068b10ad5faf12b2187014e9a60bbd95a4478d8a41b4b4248c16df3cd3c94c7985923105225f639eb129087845c66b67d36b42a18d792b7a92d5156f3c39286"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xab}]}}, {{0x9, 0x5, 0x3, 0x3, 0x608, 0xe3, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4f, 0x3}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0xa, 0x3, 0x9}}, {{0x9, 0x5, 0x2, 0x6, 0x200, 0x1, 0x6, 0x5, [@generic={0xad, 0xe, "c951a8a873f61f48002e551db127ed3d0b645e4d0ddc3a8f737db70451931e6ab809bc6fa205e0ca79c732ef7dc47be05a95975d570a0d274ea59ccf53866db771c6828ee750a2aa2d5ef2c356d121bbe9b5419b562066b7312b4192bd01a60ed28151cf686763d4826b4ff8272f740a4547c741531d053defffa58f99f1712ded3c7f96a28837bc556caa6b73aaa3bda79fc863456eeab615f421884656953a5cb8d051f593ef55c492a2"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x4}]}}, {{0x9, 0x5, 0x1, 0xfe8b7d3b8a80df95, 0x40, 0x4, 0x10, 0x1, [@generic={0xf9, 0x4, "f473e2d28731a9bc12bb7b55ae48241be2995265d8371507200b44b030b8f92a5ce9bd1ebf529ca57850ed14e56324f548f71ba516973453c5eded1af166d5eaf5ddc21e96ea6d503e2b5ec9f9537b46230a1ee4b86ae7796c94c62c043cfdda5ffaf0e20044dd5c3a6eb3a183defd84f580540105e8ef2553fb29a8d37a2d1a8d1293962cea4f21790f0407e056af794b2917f6691187a6de33522c064781f76f46a383ff9d2d175e40e738843ff9eb749794e0f00107b20fcab2fcf1d9ef847b0d6a820d6ec0f39db61fe43823f410ac5dbd63dbb044fc2afcf2bd0a4885225f08757015d288313486ccf4fd06687a77b2d83f58f60e"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xff, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xe037}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x6, 0x38, 0x21}}, {{0x9, 0x5, 0xe, 0x1, 0x10, 0xc, 0x9, 0x42, [@generic={0x29, 0x30, "07845850659c06e0da2d4ceac4f388d6684811f0d0e1f16084e97ffcd1eec6db4f0cda4ec50c31"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x9, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x1000}]}}, {{0x9, 0x5, 0x4, 0x7978343dc265df5a, 0x10, 0xa5, 0x1}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0xfa, 0xcb, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb, 0x9}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x9, 0xc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0xad}]}}]}}]}}]}}, &(0x7f00000072c0)={0xa, &(0x7f0000007100)={0xa, 0x6, 0x110, 0x80, 0x3, 0xf8, 0x10, 0x7}, 0x49, &(0x7f0000007140)={0x5, 0xf, 0x49, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x9, 0xfbff}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x4, 0xa500}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "bbda78b07245a804beea271e1140c830"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x4, 0x9, 0x157}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x6, 0xf, 0x5, [0xfff0, 0x1fe0000, 0x0]}]}, 0x1, [{0xde, &(0x7f00000071c0)=@string={0xde, 0x3, "c426bc80794d8230dc862661bf20419ef9fba9090ff6240ef1ade4089982078b1ed2cd426ca2acda90a949785b8abc3d55fe49e1b9d513c74056a9e6e70bd54ff1b76e97115b07f1f07d41173a52d5001516bc0a42ec7e020de58325af58088fd3fee6865f72851cc67635b71ce8f42bf03d869bdd2212d283f59ce66134b4a62a0547774fd2c29f5c2660dcf7ab00e0285c119b3b105a25bf103cea7a7ca5468cd46db00963d5e786b6196fe1fc09c2ab440a9fc4546afc04bbb9fee2ca5f5e1efcb5c88ec01b3896ff908fdebeb994424f8b84ffe045f8e0372e7c"}}]}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000007380)={0x0, 0x0}, &(0x7f00000073c0)=0xc) mount$fuse(0x0, &(0x7f0000007300)='./file0\x00', &(0x7f0000007340), 0x20010e0, &(0x7f0000007400)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r11}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x10000}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x4796}}, {@default_permissions}, {@blksize}, {@max_read={'max_read', 0x3d, 0x80}}, {}], [{@fsmagic={'fsmagic', 0x3d, 0x80000001}}, {@permit_directio}]}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000007580)={0x90000004}) syz_open_dev$swradio(&(0x7f00000075c0), 0x0, 0x2) 2.531053371s ago: executing program 2 (id=2309): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)) r3 = socket(0x10, 0x80002, 0x0) prctl$PR_GET_TSC(0x43, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) close(0x3) recvmsg$unix(r6, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0xfffff7ff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x3, 0x3, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}}, 0x40084c0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40ebffff0f00ff00000000000000000000004a00", @ANYRES32=0x0, @ANYBLOB="7915000000000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) socket$inet6(0xa, 0x800, 0x1ae) 2.329888898s ago: executing program 4 (id=2310): r0 = socket(0xa, 0x3, 0x87) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x890b, &(0x7f0000000000)) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x40000, 0x0) (async, rerun: 64) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (rerun: 64) mmap$KVM_VCPU(&(0x7f000079a000/0x4000)=nil, r3, 0x2000002, 0x12, r2, 0x0) 2.200764881s ago: executing program 4 (id=2311): syz_open_dev$hiddev(&(0x7f0000000000), 0x4, 0x400402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket(0x1e, 0x80004, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 1.917794908s ago: executing program 1 (id=2312): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000007000000950000000000000095ed5774e4c97d6438d625eb452a4a31d62fe8991f8d39cac8cad4332e654a14e0bf3708d9b50ad1ae5c6b66e8ca5df086c5f32970"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) syz_emit_ethernet(0x52, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000004c38fc317f61daae1ca82cc20008004c0000440000000000069078ac1e0081ac14140d8307d7e0000002440c44c21f57000700000000860600ff0100000000db88f7ff", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5008000090780000"], 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6559376689010c772064656661756c7420747275737465643a73797a20303030303030303030303030303030"], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000400)="fa07933c23fac244417865840089e85c07f0c2560372a99c791ecd5eb48f3fdd47a385385b9984f8ae4d3a0583f575af3dc28154b985f40e08778e78abf248a4a5fd2c556fa645769d0340b75933ddba29e33beb4f3e444d0cc1708916dd5e738bf2ee654815bc212c1d812d78766e9fb57eeb637e1275aa04217890c6c60c5a828fda94a3ba697ca8c02d825510b5a205f502bd636fee0c68636587fe931fa679339f8f92325251b0342008f360815b2f477947078d083046af88db62014b574eaf3a8ad21503c1c839ecf67995ed85c10e6984", 0xd4, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="7570646174652064656661756c7420747275737465643a747275737465643a003329ea972776526e5435282ed0c02f95217c36c75a12dbb7ff00088500e453a51293e0626a8c83f7a4097750eb649c0673077749d8f68c7816bf4d8290062b124348e605909e"], 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f0000000380)='./file1\x00', 0x254881, 0x1d3) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 1.497693761s ago: executing program 0 (id=2313): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000020afd000000000000000000020000090900010073797a30"], 0x48}, 0x1, 0x0, 0x0, 0x4048004}, 0x84) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) r4 = syz_clone(0x840100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x9, r4, 0x6, 0x1) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc}) socket$kcm(0xa, 0x2, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 1.202107872s ago: executing program 2 (id=2314): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) io_setup(0x81, &(0x7f0000001440)) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x2461, &(0x7f0000000380)={0x0, 0xddec, 0x10100, 0x3}, &(0x7f0000002080)=0x0, &(0x7f0000002100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) r8 = socket$inet6(0xa, 0x80002, 0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) splice(r7, 0x0, r9, 0x0, 0x2000, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 1.199173135s ago: executing program 4 (id=2315): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000040)={0x4, 0x4, 0x5}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0], 0x48) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x4c000) r4 = io_uring_setup(0x5250, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, 0x0, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001814010000000000fddb000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x44810) ioctl$SIOCSIFHWADDR(r1, 0x8932, &(0x7f0000000900)={'wlan1\x00', @random}) 1.182076567s ago: executing program 3 (id=2316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000001040)={0x1002, 0x9, 0x0, 0xff, 0x17}) write$UHID_INPUT(r1, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) read$FUSE(0xffffffffffffffff, &(0x7f00000010c0)={0x2020}, 0x2020) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0xffff133a, 0x1], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x1}], 0xc}) write(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'macvlan0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0xfffffeff, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000ff1b53a6a676ceefae930514dce9cc3c1d56b9c0db192943c4d50130f922c59c662a9ca9f28b6b34b92120f13e7b4a919112d032952338fc675877719b973baf8dbcc4649cf370", @ANYRES16=r2, @ANYBLOB="29122bbd7200fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) 1.05833215s ago: executing program 4 (id=2317): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xab, 0xe9, 0x27, 0x10, 0x13b1, 0x42, 0x76fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x2, 0x1, 0xc9, 0x18, 0x2, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0) 129.751433ms ago: executing program 3 (id=2318): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffa, 0x1}, 0x20) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0x2}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000080000000c"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)) sendmmsg(r4, &(0x7f0000000180), 0x400000000000077, 0x7600) 123.923542ms ago: executing program 4 (id=2319): socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x26020480) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x115, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0x2, 0x37b}, &(0x7f00000003c0), &(0x7f0000000140)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000007000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0c220100"], 0x4) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r4, &(0x7f00000039c0)=[{0x0}], 0x1, 0x4, 0x3) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0044d08, &(0x7f0000000040)=0x45) 99.809042ms ago: executing program 2 (id=2320): r0 = socket$netlink(0x10, 0x3, 0x2) r1 = fsopen(&(0x7f0000000280)='9p\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0xee01, &(0x7f00000005c0)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x181101, 0x0) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, &(0x7f0000000100)="382427b744646c070cde118d126643b63ead6b63bcd58fc13b2b844ee5d5cbd32f91baa6c2bc100ba693152fdcfb044a0f27bde7f9bc8c124d16200a9f846a7f866399c8a9fa013e689e0cf24126705bd353505f02e11cb3af6e6128c918a3aeae7aca95a87317e81e1a19630669c27c94ed6cbb80156d430df390203ffd403298922ee3116e778a7a15090359a1634243656ca2ab962e52c7ffd762ed8610f0f5a59dc48e832b35b8dcfade96fb9be71ab67aa3e5b1473342bed155b91cdeec8573f7294a0068a3bb25f6ee86", 0xcd, 0x2}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x13) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000200)="f646d525", 0x4) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000600)={0x12}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) 0s ago: executing program 2 (id=2321): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffff0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0xa826, 0x100, 0x4000000, 0x1a}, &(0x7f0000000000)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000440)=0xff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x77) r6 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r7 = syz_io_uring_setup(0x9e, &(0x7f0000000380)={0x0, 0xec25, 0x4, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x9, &(0x7f0000000040)=[{&(0x7f0000000280)=""/194, 0xc2}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v1={0x1000000, [{0xfb, 0xb5}]}, 0xc, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000000c0)=@filename='./file0\x00', r11, &(0x7f00000001c0)) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r10, 0x0, 0x0, 0x0, 0x32263, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): dm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 476.743863][ T30] audit: type=1400 audit(1756824578.669:844): avc: denied { append } for pid=13464 comm="syz.0.1395" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 477.041781][T13472] tipc: Failed to remove unknown binding: 66,1,1/0:1571782036/1571782038 [ 477.082779][T13472] tipc: Failed to remove unknown binding: 66,1,1/0:1571782036/1571782038 [ 477.512281][T13487] fuse: Bad value for 'fd' [ 477.527897][ T30] audit: type=1326 audit(1756824579.459:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 477.602518][ T30] audit: type=1326 audit(1756824579.459:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 477.672866][ T30] audit: type=1326 audit(1756824579.459:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 477.714434][ T30] audit: type=1326 audit(1756824579.519:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 477.818756][ T30] audit: type=1326 audit(1756824579.519:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 477.950488][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'. [ 478.093576][ T30] audit: type=1326 audit(1756824579.519:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 478.442354][ T30] audit: type=1326 audit(1756824579.519:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 478.542180][ T30] audit: type=1326 audit(1756824579.529:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 482.163704][T13581] vlan0: entered promiscuous mode [ 482.184009][T13581] cgroup: Unknown subsys name 'cpuset' [ 482.397088][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 482.397106][ T30] audit: type=1400 audit(1756824584.319:881): avc: denied { setopt } for pid=13592 comm="syz.4.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 483.621994][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1429'. [ 483.631502][T13593] netlink: 'syz.4.1429': attribute type 3 has an invalid length. [ 483.639433][T13593] netlink: 'syz.4.1429': attribute type 3 has an invalid length. [ 483.647345][T13593] netlink: 'syz.4.1429': attribute type 3 has an invalid length. [ 483.655298][T13593] netlink: 'syz.4.1429': attribute type 3 has an invalid length. [ 485.099284][ T30] audit: type=1326 audit(1756824587.029:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 485.154720][ T30] audit: type=1326 audit(1756824587.029:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 485.210822][ T30] audit: type=1326 audit(1756824587.029:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 485.289031][ T30] audit: type=1326 audit(1756824587.029:885): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 485.391465][ T30] audit: type=1326 audit(1756824587.089:886): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 486.193283][T13629] vxfs: WRONG superblock magic 00000000 at 1 [ 486.193726][T13629] vxfs: WRONG superblock magic 00000000 at 8 [ 486.193747][T13629] vxfs: can't find superblock. [ 486.328091][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 486.335078][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 486.395799][ T30] audit: type=1326 audit(1756824588.329:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d95d8ebe9 code=0x7ffc0000 [ 486.419519][ T30] audit: type=1326 audit(1756824588.329:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d95d8ebe9 code=0x7ffc0000 [ 486.442884][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.462581][ T30] audit: type=1326 audit(1756824588.379:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f9d95d8ebe9 code=0x7ffc0000 [ 486.487024][ T30] audit: type=1326 audit(1756824588.379:890): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d95d8ebe9 code=0x7ffc0000 [ 486.642662][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 486.648887][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 486.707068][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 486.895554][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 486.924005][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.956946][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 486.987488][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 487.004374][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.014545][ T10] usb 1-1: Product: 咂웨é”쉻स躅楼嬪ˉ涋饠줮츑埶㕮Ⅻè§æ¼€ë±²Ù¿èžœÌµæµ†è°Šá² ê¬„삫칈ê ä쯦䷻芀ᨛ⳺å†îµ¾ãº—勇艧釦 [ 487.054313][ T10] usb 1-1: Manufacturer: 她䃣ⓤ麔ⵢ쭳ۀ½仙齞鿣ꋇ [ 487.076290][ T10] usb 1-1: SerialNumber: 攘튱瑩ë²ã°Ý¾â¯„룬é³ì¯¾î¿¤Ü´ì‘›å¥›ãŠî¯œí€ªâ°ˆã¿¼âˆºé…«ãœ”䇥æﾷ厞鷤〫楂鮬쓣蟘苼뗮꓈åŠå¨…å¢ä¢°ë§ªá¡‡ëª¢í¬åˆŠê‰‰ïŒâ‚½éŒ€éŠ•ï«¹á»é®  [ 487.164846][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 487.174636][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 488.371367][T13623] ceph: No mds server is up or the cluster is laggy [ 488.536633][ T10] usb 1-1: USB disconnect, device number 50 [ 488.659922][T13677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.669395][T13677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.819426][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 490.522055][T13708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 490.530215][T13708] IPv6: NLM_F_CREATE should be set when creating new route [ 490.543176][T13710] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1458'. [ 491.791545][T13710] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1458'. [ 492.497394][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 492.497413][ T30] audit: type=1400 audit(1756824594.099:892): avc: denied { bind } for pid=13712 comm="syz.4.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 492.767637][T13729] overlayfs: failed to clone upperpath [ 496.808281][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1477'. [ 498.908582][T13837] overlayfs: failed to clone upperpath [ 499.863847][ T30] audit: type=1400 audit(1756824601.789:893): avc: denied { view } for pid=13859 comm="syz.0.1493" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 500.510286][T13876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1495'. [ 501.298671][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.958285][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 504.677560][T14054] netlink: 'syz.1.1532': attribute type 21 has an invalid length. [ 504.687266][T14054] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1532'. [ 504.706334][T14054] netlink: 'syz.1.1532': attribute type 4 has an invalid length. [ 505.031891][T14064] ceph: No mds server is up or the cluster is laggy [ 505.072275][ T10] libceph: connect (1)[c::]:6789 error -101 [ 505.088817][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 505.233343][T14054] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1532'. [ 505.289538][T14054] batadv3: entered promiscuous mode [ 505.361603][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 505.393911][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1541'. [ 505.452935][T14054] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 505.499457][ T66] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.663753][ T66] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.716092][T14088] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.1542'. [ 505.834726][ T1139] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.109634][ T2993] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.378409][T14092] fuseblk: Bad value for 'fd' [ 506.985326][ T5863] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 507.144951][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 507.154693][ T5863] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 507.164880][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.195642][ T5863] usb 3-1: config 0 descriptor?? [ 507.226396][ T5863] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 507.617235][ T5863] gspca_nw80x: reg_w err -71 [ 507.622797][ T5863] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 507.653030][ T5863] usb 3-1: USB disconnect, device number 59 [ 508.037870][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'. [ 508.630990][T14140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.676451][T14140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.286181][ T30] audit: type=1400 audit(1756824611.169:894): avc: denied { ioctl } for pid=14168 comm="syz.0.1555" path="socket:[35715]" dev="sockfs" ino=35715 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 510.432852][T14200] netlink: 'syz.2.1560': attribute type 21 has an invalid length. [ 510.440812][T14200] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1560'. [ 510.453898][T14200] netlink: 'syz.2.1560': attribute type 4 has an invalid length. [ 510.462213][T14200] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1560'. [ 510.577986][T14208] overlayfs: missing 'workdir' [ 510.608488][T14200] batadv3: entered promiscuous mode [ 510.641444][T14200] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 511.128841][T14216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1564'. [ 511.412982][T14221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.452528][T14221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.493861][T14221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.554973][T14221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.633341][T14230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1565'. [ 513.438985][ T51] Bluetooth: hci4: Malformed HCI Event [ 514.373432][T14273] netlink: 'syz.1.1576': attribute type 21 has an invalid length. [ 514.414857][T14273] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1576'. [ 514.424154][T14273] netlink: 'syz.1.1576': attribute type 4 has an invalid length. [ 514.445132][T14273] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1576'. [ 514.601027][T14280] netlink: 'syz.3.1579': attribute type 4 has an invalid length. [ 514.616228][T14282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.770768][T14282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.770923][T14272] batadv4: entered promiscuous mode [ 514.816535][T14272] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 514.864433][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 514.874669][T14291] netlink: 'syz.3.1579': attribute type 4 has an invalid length. [ 515.049345][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 515.096668][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 515.106586][ T10] usb 1-1: config 79 has an invalid interface number: 237 but max is 0 [ 515.143818][ T10] usb 1-1: config 79 has no interface number 0 [ 515.174379][ T10] usb 1-1: config 79 interface 237 has no altsetting 0 [ 515.206130][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=4a.4f [ 515.248746][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.301491][ T10] usb 1-1: Product: syz [ 515.317061][ T10] usb 1-1: Manufacturer: syz [ 515.332641][ T10] usb 1-1: SerialNumber: syz [ 515.560946][ T10] pn533_usb 1-1:79.237: NFC: Could not find bulk-in or bulk-out endpoint [ 515.641707][ T10] usb 1-1: USB disconnect, device number 51 [ 517.035350][T14324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.331545][T14324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.725779][T14332] sch_fq: defrate 6 ignored. [ 519.643203][T14353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=14353 comm=syz.3.1591 [ 519.780953][T14353] batman_adv: batadv0: Adding interface: vxlan0 [ 519.788390][T14353] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.869942][T14353] batman_adv: batadv0: Interface activated: vxlan0 [ 519.879592][ T1097] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.894563][ T1097] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.909888][ T1097] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.920611][ T1097] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.038083][T14362] syz.3.1594 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 520.552555][ T30] audit: type=1400 audit(1756824622.479:895): avc: denied { map } for pid=14367 comm="syz.2.1597" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 521.045947][ T30] audit: type=1400 audit(1756824622.479:896): avc: denied { execute } for pid=14367 comm="syz.2.1597" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 521.129620][T14373] netlink: 'syz.4.1596': attribute type 21 has an invalid length. [ 521.141765][T14373] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1596'. [ 521.211838][T14381] batadv3: entered promiscuous mode [ 521.226664][T14381] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 521.586679][T14373] netlink: 'syz.4.1596': attribute type 4 has an invalid length. [ 521.621982][T14373] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1596'. [ 522.582817][T14402] unknown channel width for channel at 909000KHz? [ 522.590354][T14402] unknown channel width for channel at 909000KHz? [ 522.598886][T14402] unknown channel width for channel at 909000KHz? [ 526.134964][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'. [ 526.598895][T14442] sp0: Synchronizing with TNC [ 526.613024][T14445] lo speed is unknown, defaulting to 1000 [ 526.621607][T14445] lo speed is unknown, defaulting to 1000 [ 526.630163][T14445] lo speed is unknown, defaulting to 1000 [ 526.762024][T14445] infiniband sz1: set active [ 526.767187][T14445] infiniband sz1: added lo [ 526.807302][ T10] lo speed is unknown, defaulting to 1000 [ 526.814133][ T30] audit: type=1400 audit(1756824628.590:897): avc: denied { listen } for pid=14437 comm="syz.3.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 526.828606][T14445] RDS/IB: sz1: added [ 526.838744][T14445] smc: adding ib device sz1 with port count 1 [ 526.845149][T14445] smc: ib device sz1 port 1 has pnetid [ 526.855611][T14445] lo speed is unknown, defaulting to 1000 [ 526.995843][T14445] lo speed is unknown, defaulting to 1000 [ 527.135261][T14445] lo speed is unknown, defaulting to 1000 [ 527.275214][T14445] lo speed is unknown, defaulting to 1000 [ 527.414433][T14445] lo speed is unknown, defaulting to 1000 [ 527.579090][ T10] lo speed is unknown, defaulting to 1000 [ 528.037412][T14471] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1613'. [ 528.462573][T14465] 9pnet_fd: Insufficient options for proto=fd [ 530.052914][T14504] kAFS: No cell specified [ 530.284333][ T9] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 530.555932][ T9] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 530.596119][ T9] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 530.632105][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.706103][ T9] usb 1-1: probing VID:PID(2201:012C) [ 530.751010][ T9] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 530.789997][ T9] vub300 1-1:64.0: probe with driver vub300 failed with error -22 [ 530.880445][ T9] usb 1-1: USB disconnect, device number 52 [ 532.223517][ T30] audit: type=1400 audit(1756824634.150:898): avc: denied { read } for pid=14539 comm="syz.1.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 532.746609][ T30] audit: type=1400 audit(1756824634.680:899): avc: denied { ioctl } for pid=14539 comm="syz.1.1628" path="socket:[37193]" dev="sockfs" ino=37193 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 533.841196][T14565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.924888][T14565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.053838][T14565] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 534.253025][T14587] netlink: 'syz.3.1632': attribute type 21 has an invalid length. [ 534.261160][T14587] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1632'. [ 534.361680][T14599] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 534.382272][T14599] loop6: detected capacity change from 0 to 63 [ 534.709451][ T30] audit: type=1400 audit(1756824636.280:900): avc: denied { append } for pid=14591 comm="syz.2.1634" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 534.878024][T14587] netlink: 'syz.3.1632': attribute type 4 has an invalid length. [ 534.921209][ T30] audit: type=1400 audit(1756824636.330:901): avc: denied { execute } for pid=14591 comm="syz.2.1634" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 535.028207][T14587] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1632'. [ 535.826101][T14598] batadv3: entered promiscuous mode [ 535.832805][T14598] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 536.148328][ T30] audit: type=1326 audit(1756824638.080:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 536.374389][ T30] audit: type=1326 audit(1756824638.080:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 536.475869][ T30] audit: type=1326 audit(1756824638.080:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 536.610119][ T30] audit: type=1326 audit(1756824638.080:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 536.633986][ T30] audit: type=1326 audit(1756824638.080:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 536.657482][ T30] audit: type=1326 audit(1756824638.080:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.0.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 537.138911][T14623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.164786][T14623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.181440][T14625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.195706][T14625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.206699][T14633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.219357][T14633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.319561][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 537.319579][ T30] audit: type=1326 audit(1756824639.250:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14641 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 537.349060][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.374928][T14642] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 537.394390][T14642] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 537.495442][T14640] binder: Bad value for 'max' [ 537.515678][ T5930] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 537.581038][ T30] audit: type=1326 audit(1756824639.300:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14641 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 537.685033][ T5930] usb 3-1: device descriptor read/64, error -71 [ 537.851366][ T30] audit: type=1326 audit(1756824639.300:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14641 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 537.958715][ T30] audit: type=1326 audit(1756824639.300:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14641 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 537.982132][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.008079][ T30] audit: type=1326 audit(1756824639.300:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14641 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 538.032451][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.039235][ T30] audit: type=1326 audit(1756824639.300:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14641 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 538.069042][ T5930] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 538.130688][ T30] audit: type=1326 audit(1756824639.300:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14641 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 538.154101][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.244320][ T5930] usb 3-1: device descriptor read/64, error -71 [ 538.347569][T14655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.359763][T14655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.717870][ T5930] usb usb3-port1: attempt power cycle [ 538.823132][ T30] audit: type=1326 audit(1756824639.300:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14641 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 538.918404][T14655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.953912][T14655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.973385][ T30] audit: type=1326 audit(1756824639.350:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14641 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 539.084328][ T5930] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 539.778803][ T30] audit: type=1326 audit(1756824639.360:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14641 comm="syz.0.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 539.802205][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.047480][ T5930] usb 3-1: device descriptor read/8, error -71 [ 540.818489][T14694] o2cb: This node has not been configured. [ 541.210437][T14694] o2cb: Cluster check failed. Fix errors before retrying. [ 541.250798][T14694] (syz.3.1651,14694,1):user_dlm_register:674 ERROR: status = -22 [ 541.294852][T14694] (syz.3.1651,14694,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 543.143050][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 543.143067][ T30] audit: type=1400 audit(1756824645.070:1008): avc: denied { mounton } for pid=14718 comm="syz.0.1660" path="/323/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 543.686743][ T30] audit: type=1400 audit(1756824645.620:1009): avc: denied { create } for pid=14729 comm="syz.0.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 543.720062][T14734] netlink: 'syz.0.1662': attribute type 21 has an invalid length. [ 543.728060][T14734] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1662'. [ 543.738197][T14734] netlink: 'syz.0.1662': attribute type 4 has an invalid length. [ 543.751307][T14734] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1662'. [ 543.851535][T14736] batadv3: entered promiscuous mode [ 543.856897][ T30] audit: type=1400 audit(1756824645.710:1010): avc: denied { unmount } for pid=14715 comm="syz.1.1659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 543.944706][T14736] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 544.144128][T14744] Invalid ELF header type: 2 != 1 [ 544.170633][T14745] Invalid ELF header type: 2 != 1 [ 544.358484][ T30] audit: type=1400 audit(1756824646.290:1011): avc: denied { bind } for pid=14749 comm="syz.2.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 544.390671][T14750] ip6gre1: entered allmulticast mode [ 544.586591][T14750] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.598467][T14750] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.604832][T14750] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.661768][T14750] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.302358][T14750] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.313963][T14750] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.634938][T14750] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 546.661982][T14750] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.694487][T14750] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.873390][T14788] afs: Unknown parameter 'dy' [ 546.882431][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1674'. [ 547.566224][ T66] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.717775][ T66] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.530910][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.570246][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.829648][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.463241][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.502519][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.521875][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.540269][T14831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.592063][T14831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.542421][T14866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.553109][ T30] audit: type=1326 audit(1756824652.470:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 550.636576][T14866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.663652][T14875] overlayfs: failed to clone upperpath [ 550.678688][ T30] audit: type=1326 audit(1756824652.470:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 550.702195][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.738138][T14875] overlayfs: failed to clone upperpath [ 550.746487][T14875] overlayfs: failed to clone upperpath [ 550.769485][T14875] overlayfs: failed to clone upperpath [ 550.779769][T14875] overlayfs: failed to clone upperpath [ 550.797966][T14875] overlayfs: failed to clone upperpath [ 550.827508][T14875] overlayfs: failed to clone upperpath [ 550.850309][T14875] overlayfs: failed to clone upperpath [ 550.883802][T14875] overlayfs: failed to clone upperpath [ 550.903977][T14875] overlayfs: failed to clone upperpath [ 551.353911][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.383044][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.872733][T14904] netlink: 'syz.3.1699': attribute type 21 has an invalid length. [ 551.902262][T14904] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1699'. [ 551.920137][T14904] netlink: 'syz.3.1699': attribute type 4 has an invalid length. [ 552.018839][T14904] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1699'. [ 552.180675][T14904] batadv4: entered promiscuous mode [ 552.188553][T14904] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 552.737624][ T30] audit: type=1400 audit(1756824654.620:1014): avc: denied { append } for pid=14914 comm="syz.0.1701" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 552.884560][T14920] afs: Unknown parameter 'dy' [ 553.642741][ T30] audit: type=1400 audit(1756824655.570:1015): avc: denied { write } for pid=14928 comm="syz.0.1706" name="file0" dev="tmpfs" ino=1772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 553.688237][ T30] audit: type=1400 audit(1756824655.570:1016): avc: denied { open } for pid=14928 comm="syz.0.1706" path="/332/file0" dev="tmpfs" ino=1772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 553.733398][ T30] audit: type=1400 audit(1756824655.570:1017): avc: denied { ioctl } for pid=14928 comm="syz.0.1706" path="/332/file0" dev="tmpfs" ino=1772 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 554.151293][T14954] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1709'. [ 554.336432][ T5930] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 554.432782][ T30] audit: type=1400 audit(1756824656.360:1018): avc: denied { write } for pid=14955 comm="syz.1.1712" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 554.657747][T14961] netlink: 'syz.1.1712': attribute type 3 has an invalid length. [ 554.864088][ T30] audit: type=1400 audit(1756824656.400:1019): avc: denied { ioctl } for pid=14955 comm="syz.1.1712" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 554.945144][ T30] audit: type=1400 audit(1756824656.410:1020): avc: denied { getopt } for pid=14953 comm="syz.4.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 554.970117][ T30] audit: type=1400 audit(1756824656.420:1021): avc: denied { map } for pid=14955 comm="syz.1.1712" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 555.168873][T14968] afs: Unknown parameter 'dy' [ 555.565703][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 555.566028][ T30] audit: type=1326 audit(1756824657.500:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.2.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb55d38ebe9 code=0x7ffc0000 [ 555.673271][ T30] audit: type=1326 audit(1756824657.540:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.2.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d38ebe9 code=0x7ffc0000 [ 555.728585][T14975] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 555.738044][T14975] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 555.751647][ T30] audit: type=1326 audit(1756824657.540:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.2.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb55d38ebe9 code=0x7ffc0000 [ 556.574508][ T30] audit: type=1326 audit(1756824657.540:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.2.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d38ebe9 code=0x7ffc0000 [ 556.654543][ T30] audit: type=1326 audit(1756824657.550:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.2.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d38ebe9 code=0x7ffc0000 [ 556.934562][ T30] audit: type=1326 audit(1756824657.550:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.2.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fb55d38ebe9 code=0x7ffc0000 [ 557.151418][T14992] lo speed is unknown, defaulting to 1000 [ 557.241087][ T30] audit: type=1326 audit(1756824657.550:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.2.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d38ebe9 code=0x7ffc0000 [ 557.264674][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.814947][ T30] audit: type=1326 audit(1756824657.550:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.2.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d38ebe9 code=0x7ffc0000 [ 557.863112][ T30] audit: type=1326 audit(1756824657.550:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.2.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb55d38d550 code=0x7ffc0000 [ 557.895167][ T30] audit: type=1326 audit(1756824657.550:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.2.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d38ebe9 code=0x7ffc0000 [ 558.306210][T15008] syz_tun: entered allmulticast mode [ 559.003411][T15011] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 559.528885][T15035] dlm: non-version read from control device 0 [ 560.371100][T15050] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1727'. [ 562.737284][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.608820][ T2993] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.624103][ T2993] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.723645][ T2993] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.802201][ T2993] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.814737][ T2993] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.841767][ T2993] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.886515][T15095] fuse: Unknown parameter '000000000000000000000120x000000000000000a' [ 563.944984][ T2993] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.982694][ T2993] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.523554][T15126] netem: incorrect ge model size [ 565.548461][T15126] netem: change failed [ 565.667419][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 565.667434][ T30] audit: type=1326 audit(1756824667.580:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 565.744424][ T30] audit: type=1326 audit(1756824667.580:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 565.814549][ T30] audit: type=1326 audit(1756824667.590:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 565.902438][ T30] audit: type=1326 audit(1756824667.590:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 566.776852][ T30] audit: type=1326 audit(1756824667.590:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 566.969127][ T30] audit: type=1326 audit(1756824667.590:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 567.455432][ T30] audit: type=1326 audit(1756824667.590:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 567.478893][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.604591][ T30] audit: type=1326 audit(1756824667.590:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 567.628191][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.640339][ T30] audit: type=1326 audit(1756824667.590:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 568.270963][ T30] audit: type=1326 audit(1756824667.590:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 568.294810][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.615289][T15162] netlink: 'syz.0.1747': attribute type 21 has an invalid length. [ 568.623284][T15162] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1747'. [ 568.644738][T15162] netlink: 'syz.0.1747': attribute type 4 has an invalid length. [ 568.697625][T15162] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1747'. [ 568.816019][T15168] batadv4: entered promiscuous mode [ 568.828646][T15168] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 569.325133][ T51] Bluetooth: hci3: unexpected event for opcode 0x200d [ 569.985636][T15183] overlayfs: failed to clone upperpath [ 570.032952][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'. [ 570.910583][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 570.910618][ T30] audit: type=1400 audit(1756824672.840:1074): avc: denied { getopt } for pid=15189 comm="syz.4.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 570.951034][T15194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.094844][T15194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.198741][ T30] audit: type=1400 audit(1756824673.120:1075): avc: denied { accept } for pid=15201 comm="syz.3.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 571.816396][T15210] afs: Unknown parameter 'dy' [ 571.833221][T15202] hsr_slave_1 (unregistering): left promiscuous mode [ 572.159309][T15219] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1759'. [ 572.168465][T15219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1759'. [ 572.178691][T15219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1759'. [ 572.660173][T15220] netlink: 'syz.4.1760': attribute type 21 has an invalid length. [ 572.702320][T15220] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1760'. [ 573.857165][ T51] Bluetooth: hci4: unexpected event for opcode 0x200d [ 573.888256][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 575.163940][ T30] audit: type=1400 audit(1756824677.090:1076): avc: denied { write } for pid=15256 comm="syz.4.1768" name="file0" dev="tmpfs" ino=2184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 575.332471][ T30] audit: type=1400 audit(1756824677.090:1077): avc: denied { open } for pid=15256 comm="syz.4.1768" path="/400/file0" dev="tmpfs" ino=2184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 575.417145][T15262] netlink: 'syz.1.1769': attribute type 21 has an invalid length. [ 575.425181][T15262] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1769'. [ 575.642778][T15237] team0 (unregistering): Port device team_slave_0 removed [ 575.665228][T15237] team0 (unregistering): Port device team_slave_1 removed [ 576.208941][T15237] team0 (unregistering): Port device geneve0 removed [ 576.391080][T15262] netlink: 'syz.1.1769': attribute type 4 has an invalid length. [ 576.400889][T15262] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1769'. [ 576.452538][T15264] batadv5: entered promiscuous mode [ 576.500271][T15264] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 576.618883][T15307] afs: Unknown parameter 'dy' [ 577.605413][T15326] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1774'. [ 577.614478][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1774'. [ 577.623448][T15326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1774'. [ 578.139023][ T51] Bluetooth: hci2: unexpected event for opcode 0x200d [ 579.289595][T15339] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1778'. [ 579.754833][ T5849] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 580.402017][T15354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=15354 comm=syz.3.1784 [ 580.471032][ T30] audit: type=1400 audit(1756824682.400:1078): avc: denied { write } for pid=15346 comm="syz.0.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 580.535279][T15354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=15354 comm=syz.3.1784 [ 580.563857][ T5849] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 580.593016][ T5849] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 580.635797][ T5849] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 580.694585][ T5849] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 580.786070][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.820418][T15365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1785'. [ 580.879316][ T5849] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 580.899983][ T5849] usb 3-1: invalid MIDI out EP 0 [ 581.616068][T15342] delete_channel: no stack [ 581.661112][ T5849] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 581.753509][ T5849] usb 3-1: USB disconnect, device number 64 [ 582.224889][ T51] Bluetooth: hci2: unexpected event for opcode 0x200d [ 583.364901][T15424] netlink: 'syz.1.1791': attribute type 10 has an invalid length. [ 583.373720][T15424] batman_adv: batadv0: Adding interface: team0 [ 583.389012][T15424] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.463997][T15424] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 583.550673][T15429] netlink: 'syz.0.1792': attribute type 21 has an invalid length. [ 583.558775][T15429] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1792'. [ 583.589681][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 583.624565][T15429] netlink: 'syz.0.1792': attribute type 4 has an invalid length. [ 583.632591][T15429] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1792'. [ 583.663147][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1791'. [ 583.778106][T15429] batadv5: entered promiscuous mode [ 583.789647][T15429] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 583.805579][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 583.816854][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.827592][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 583.919361][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.062689][ T9] usb 3-1: config 0 descriptor?? [ 584.385004][T15444] : renamed from bridge_slave_0 (while UP) [ 584.531286][ T9] kye 0003:0458:501A.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 584.542843][ T9] kye 0003:0458:501A.000E: unknown main item tag 0x0 [ 584.582460][ T9] kye 0003:0458:501A.000E: unknown main item tag 0x0 [ 584.607055][ T9] kye 0003:0458:501A.000E: unknown main item tag 0x0 [ 584.646189][ T9] kye 0003:0458:501A.000E: unknown main item tag 0x0 [ 584.707611][ T9] kye 0003:0458:501A.000E: unknown main item tag 0x0 [ 584.725700][ T9] kye 0003:0458:501A.000E: unknown main item tag 0x0 [ 584.762248][ T9] kye 0003:0458:501A.000E: unknown main item tag 0x0 [ 584.925502][ T9] kye 0003:0458:501A.000E: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 584.962133][ T9] kye 0003:0458:501A.000E: tablet-enabling feature report not found [ 584.992137][T15457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.001128][ T9] kye 0003:0458:501A.000E: tablet enabling failed [ 585.003272][T15455] lo speed is unknown, defaulting to 1000 [ 585.235036][T15457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.765439][ T30] audit: type=1400 audit(1756824688.690:1079): avc: denied { name_connect } for pid=15503 comm="syz.1.1801" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 586.889210][ T30] audit: type=1326 audit(1756824688.800:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15489 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 586.954566][ T30] audit: type=1326 audit(1756824688.800:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15489 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 587.058483][T15517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.087506][ T30] audit: type=1326 audit(1756824688.800:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15489 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 587.148056][T15517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.178869][ T30] audit: type=1326 audit(1756824688.810:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15489 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 587.261281][ T30] audit: type=1326 audit(1756824688.810:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15489 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 587.343857][ T30] audit: type=1326 audit(1756824688.810:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15489 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 587.716314][T15531] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1802'. [ 587.725365][T15531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1802'. [ 587.734346][T15531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1802'. [ 588.128113][ T30] audit: type=1326 audit(1756824688.810:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15489 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 588.289050][ T30] audit: type=1326 audit(1756824688.810:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15489 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 588.410873][ T30] audit: type=1326 audit(1756824688.810:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15489 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fab1398ebe9 code=0x7ffc0000 [ 588.411281][ T5923] usb 3-1: USB disconnect, device number 65 [ 588.446079][T15535] 9pnet_fd: Insufficient options for proto=fd [ 588.829465][T15549] lo speed is unknown, defaulting to 1000 [ 590.154515][ T5930] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 590.316457][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 590.339255][ T5930] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 590.384308][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.428769][ T5930] usb 1-1: config 0 descriptor?? [ 591.535834][ T5930] ath6kl: Failed to submit usb control message: -110 [ 591.548365][ T5930] ath6kl: unable to send the bmi data to the device: -110 [ 591.585634][ T5930] ath6kl: Unable to send get target info: -110 [ 591.598469][ T5930] ath6kl: Failed to init ath6kl core: -110 [ 591.609215][ T5930] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 591.860968][T15634] overlayfs: failed lookup in lower (newroot/304, name='bus', err=-40): overlapping layers [ 592.668354][ T5930] usb 1-1: USB disconnect, device number 54 [ 592.695566][T15656] 9pnet_fd: Insufficient options for proto=fd [ 592.792665][T15671] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 593.024580][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 593.024600][ T30] audit: type=1400 audit(1756824694.950:1103): avc: denied { mounton } for pid=15679 comm="syz.0.1822" path="/351/file0" dev="ramfs" ino=40383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 593.066945][T15680] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1822'. [ 593.154684][T15686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'. [ 593.166547][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1822'. [ 594.381476][ T30] audit: type=1400 audit(1756824696.300:1104): avc: denied { unmount } for pid=5862 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 594.418253][T15691] netlink: 'syz.3.1823': attribute type 21 has an invalid length. [ 594.426682][T15691] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1823'. [ 594.447180][T15694] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1825'. [ 594.458300][T15691] netlink: 'syz.3.1823': attribute type 4 has an invalid length. [ 594.472434][T15691] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1823'. [ 594.568925][T15691] batadv5: entered promiscuous mode [ 594.637233][T15691] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 594.698591][T15704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1827'. [ 604.215947][T15718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1831'. [ 605.135196][ T5923] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 605.423245][T15739] afs: Unknown parameter 'dy' [ 605.444326][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 605.512764][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.576569][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.634272][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 605.697363][ T5923] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 605.771676][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.871207][ T5923] usb 3-1: config 0 descriptor?? [ 606.293610][T15760] netlink: 'syz.1.1840': attribute type 21 has an invalid length. [ 606.301628][T15760] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1840'. [ 606.321016][T15760] netlink: 'syz.1.1840': attribute type 4 has an invalid length. [ 606.384710][ T5923] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 606.392030][ T5923] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 606.404143][T15760] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1840'. [ 606.423380][ T5923] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 606.432785][ T5923] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 606.450329][ T5923] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 606.462309][T15760] batadv7: entered promiscuous mode [ 606.489756][T15760] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 606.504335][ T5923] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 606.549168][ T5923] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 606.571385][ T5923] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 606.594064][ T5923] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 606.625675][ T5923] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 606.679380][ T5923] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 606.707591][ T5923] microsoft 0003:045E:07DA.000F: no inputs found [ 606.827195][ T5923] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 606.889944][ T5923] usb 3-1: USB disconnect, device number 66 [ 607.775759][T15804] sp0: Synchronizing with TNC [ 607.929048][T15804] sp0: Found TNC [ 607.986150][T15803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.164369][ T5923] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 608.225754][T15827] ptm ptm17: ldisc open failed (-12), clearing slot 17 [ 609.019048][T15846] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 609.632518][T15860] netlink: 'syz.0.1857': attribute type 21 has an invalid length. [ 609.640534][T15860] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1857'. [ 610.191231][T15860] netlink: 'syz.0.1857': attribute type 4 has an invalid length. [ 610.223536][T15860] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1857'. [ 610.342246][T15862] batadv6: entered promiscuous mode [ 610.382634][T15881] 9pnet_fd: Insufficient options for proto=fd [ 610.733087][T15862] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 610.996246][T15891] overlayfs: failed to resolve './file0': -2 [ 612.784932][ T30] audit: type=1400 audit(1756824714.720:1105): avc: denied { setopt } for pid=15914 comm="syz.4.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 612.861482][ T30] audit: type=1400 audit(1756824714.790:1106): avc: denied { ioctl } for pid=15918 comm="syz.2.1873" path="socket:[41257]" dev="sockfs" ino=41257 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 612.931645][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'. [ 613.546785][T15933] netlink: 'syz.4.1874': attribute type 21 has an invalid length. [ 613.596808][T15933] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1874'. [ 613.632303][T15933] netlink: 'syz.4.1874': attribute type 4 has an invalid length. [ 613.695235][T15933] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1874'. [ 613.985982][T15935] batadv4: entered promiscuous mode [ 614.007133][T15935] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 614.084982][ T5930] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 614.183273][T15944] vivid-000: ================= START STATUS ================= [ 614.193871][T15944] vivid-000: Test Pattern: 75% Colorbar [ 614.203999][T15944] vivid-000: Fill Percentage of Frame: 100 [ 614.209987][T15944] vivid-000: Horizontal Movement: No Movement [ 614.224057][T15944] vivid-000: Vertical Movement: No Movement [ 614.240253][T15944] vivid-000: OSD Text Mode: All [ 614.245293][T15944] vivid-000: Show Border: false [ 614.264699][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 614.276060][ T5930] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 614.304362][ T5930] usb 3-1: config 0 has no interface number 0 [ 614.312606][ T5930] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 614.322178][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.335069][T15944] vivid-000: Show Square: false [ 614.352271][T15944] vivid-000: Sensor Flipped Horizontally: false [ 614.361456][ T5930] usb 3-1: Product: syz [ 614.407949][ T5930] usb 3-1: Manufacturer: syz [ 614.458675][ T5930] usb 3-1: SerialNumber: syz [ 614.464965][T15944] vivid-000: Sensor Flipped Vertically: false [ 614.474634][T15944] vivid-000: Insert SAV Code in Image: false [ 614.479337][ T5930] usb 3-1: config 0 descriptor?? [ 614.492093][T15944] vivid-000: Insert EAV Code in Image: false [ 614.505389][T15944] vivid-000: Insert Video Guard Band: false [ 614.517312][T15944] vivid-000: Reduced Framerate: false [ 614.530287][T15944] vivid-000: HDMI 000-0 Is Connected To: [ 614.530793][ T5930] hub 3-1:0.145: bad descriptor, ignoring hub [ 614.544502][T15944] Test Pattern Generator [ 614.551027][T15944] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 614.564034][T15944] vivid-000: Enable Capture Cropping: true [ 614.579380][T15944] vivid-000: Enable Capture Composing: true [ 614.593354][T15944] vivid-000: Enable Capture Scaler: true [ 614.602080][ T5930] hub 3-1:0.145: probe with driver hub failed with error -5 [ 614.618866][T15944] vivid-000: Timestamp Source: End of Frame [ 614.633236][T15944] vivid-000: Colorspace: sRGB [ 614.643202][T15944] vivid-000: Transfer Function: Default [ 614.652281][T15944] vivid-000: Y'CbCr Encoding: Default [ 614.668880][T15944] vivid-000: HSV Encoding: Hue 0-179 [ 614.685173][T15944] vivid-000: Quantization: Default [ 614.695025][T15944] vivid-000: Apply Alpha To Red Only: false [ 614.702570][ T5930] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input21 [ 614.720670][T15944] vivid-000: Standard Aspect Ratio: 4x3 [ 614.735908][T15944] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 614.751464][T15944] vivid-000: DV Timings: 640x480p59 inactive [ 614.757725][T15944] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 614.780754][T15944] vivid-000: Maximum EDID Blocks: 2 [ 614.788388][T15944] vivid-000: Limited RGB Range (16-235): false [ 614.803915][T15944] vivid-000: Rx RGB Quantization Range: Automatic [ 614.820787][T15944] vivid-000: Power Present: 0x00000001 [ 614.830794][T15944] tpg source WxH: 320x180 (R'G'B) [ 614.837328][T15944] tpg field: 1 [ 614.845772][T15944] tpg crop: (0,0)/320x180 [ 614.853527][T15944] tpg compose: (0,0)/320x180 [ 614.859933][T15944] tpg colorspace: 8 [ 614.865656][T15944] tpg transfer function: 0/0 [ 614.875894][T15944] tpg quantization: 0/0 [ 614.880163][T15944] tpg RGB range: 0/2 [ 614.887131][T15944] vivid-000: ================== END STATUS ================== [ 614.975107][T15967] overlay: ./file0 is not a directory [ 616.457316][T15989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1889'. [ 617.164866][T15999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.401017][T16007] serio: Serial port ptm0 [ 619.037307][ T30] audit: type=1400 audit(1756824720.870:1107): avc: denied { listen } for pid=15998 comm="syz.1.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 619.163060][ T30] audit: type=1400 audit(1756824721.090:1108): avc: denied { shutdown } for pid=16018 comm="syz.3.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 619.317247][T16022] lo speed is unknown, defaulting to 1000 [ 620.002892][ T5930] usb 3-1: USB disconnect, device number 68 [ 621.694393][ T5962] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 621.871331][ T5962] usb 3-1: unable to get BOS descriptor or descriptor too short [ 621.913677][ T5962] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 621.974300][ T5962] usb 3-1: can't read configurations, error -71 [ 622.185711][T16099] overlayfs: failed to resolve './file0': -2 [ 622.648253][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1909'. [ 622.670776][T16115] netlink: 'syz.2.1909': attribute type 30 has an invalid length. [ 622.741797][T16111] geneve2: entered promiscuous mode [ 622.764841][T16124] program syz.1.1911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.829610][T16111] geneve2: entered allmulticast mode [ 623.014783][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 623.051249][ T1139] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.125581][ T1139] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.195300][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 623.209329][ T1139] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.210078][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.262132][ T1139] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.311798][T16150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1912'. [ 623.341793][ T9] usb 1-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 623.411670][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.560327][ T9] usb 1-1: config 0 descriptor?? [ 623.939282][T16160] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1914'. [ 623.948597][T16160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1914'. [ 623.957638][T16160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1914'. [ 624.330893][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.347806][ T9] uclogic 0003:2179:0077.0010: interface is invalid, ignoring [ 624.913096][T16170] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1915'. [ 624.922210][T16170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1915'. [ 624.931439][T16170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1915'. [ 625.185942][T16126] netlink: 'syz.0.1910': attribute type 39 has an invalid length. [ 625.328389][T16167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16167 comm=syz.0.1910 [ 625.812295][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1916'. [ 625.905083][T16183] netlink: 'syz.1.1917': attribute type 1 has an invalid length. [ 625.931015][T16183] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1917'. [ 625.995402][ T5962] usb 1-1: USB disconnect, device number 55 [ 627.376992][T16218] batman_adv: batadv0: Adding interface: gretap2 [ 627.498445][T16218] batman_adv: batadv0: Interface activated: gretap2 [ 627.828285][T16230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.841189][T16230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.337978][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c7a [ 628.911203][ T30] audit: type=1400 audit(1756824730.740:1109): avc: denied { bind } for pid=16246 comm="syz.2.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 629.669784][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1930'. [ 630.154663][ T30] audit: type=1400 audit(1756824732.080:1110): avc: denied { create } for pid=16275 comm="syz.3.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 631.830141][T16305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1939'. [ 631.841201][T16305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=276 sclass=netlink_route_socket pid=16305 comm=syz.0.1939 [ 631.919706][T16309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1938'. [ 632.084372][T16309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1938'. [ 632.688832][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1941'. [ 632.803282][T16319] sp0: Synchronizing with TNC [ 633.730297][T16341] sctp: [Deprecated]: syz.0.1946 (pid 16341) Use of struct sctp_assoc_value in delayed_ack socket option. [ 633.730297][T16341] Use struct sctp_sack_info instead [ 633.749749][T16346] fuse: Unknown parameter 'fd0x000000000000000a' [ 633.758424][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1947'. [ 633.768832][T16346] openvswitch: netlink: Flow actions attr not present in new flow. [ 634.064810][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 634.248077][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 634.265814][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.276683][ T9] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 634.302702][ T9] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.330062][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 634.349471][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 634.359275][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.367832][ T9] usb 3-1: Product: syz [ 634.373403][ T9] usb 3-1: Manufacturer: syz [ 634.383750][ T9] usb 3-1: SerialNumber: syz [ 634.398068][ T9] usb 3-1: config 0 descriptor?? [ 634.714697][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1945'. [ 635.014724][ T5977] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 635.202743][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.242984][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1953'. [ 635.489918][ T5977] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 635.505421][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.518788][T16349] bond0: (slave bond_slave_1): Releasing backup interface [ 635.611161][ T5977] usb 1-1: config 0 descriptor?? [ 637.749985][ T30] audit: type=1400 audit(1756824738.090:1111): avc: denied { read } for pid=16382 comm="syz.0.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 638.297712][ T5977] usbhid 1-1:0.0: can't add hid device: -71 [ 638.304759][ T5977] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 638.305296][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 638.315382][ T5977] usb 1-1: USB disconnect, device number 56 [ 638.499530][ T9] usb 3-1: Can not set alternate setting to 1, error: -71 [ 638.506893][ T9] synaptics_usb 3-1:0.0: probe with driver synaptics_usb failed with error -71 [ 638.551420][ T30] audit: type=1400 audit(1756824740.460:1112): avc: denied { setopt } for pid=16433 comm="syz.3.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 638.608329][ T9] usb 3-1: USB disconnect, device number 71 [ 638.635389][ T30] audit: type=1400 audit(1756824740.460:1113): avc: denied { write } for pid=16433 comm="syz.3.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 638.691720][ T30] audit: type=1400 audit(1756824740.470:1114): avc: denied { read } for pid=16433 comm="syz.3.1958" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 639.437181][T16446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.940582][T16468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.949238][T16468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.001523][T16464] netlink: 'syz.2.1963': attribute type 21 has an invalid length. [ 641.010742][T16464] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1963'. [ 641.020510][T16464] netlink: 'syz.2.1963': attribute type 4 has an invalid length. [ 641.030301][T16464] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1963'. [ 641.140948][T16464] batadv4: entered promiscuous mode [ 641.164352][T16464] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 641.340318][T16477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 641.535520][T16477] team0: Port device team_slave_0 removed [ 643.046065][T16498] pim6reg: entered allmulticast mode [ 643.160438][T16512] pim6reg: left allmulticast mode [ 643.764022][T16528] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 644.506106][T16543] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 644.607582][T16547] netlink: 'syz.0.1980': attribute type 21 has an invalid length. [ 644.615974][T16547] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1980'. [ 644.625839][T16547] netlink: 'syz.0.1980': attribute type 4 has an invalid length. [ 644.639972][T16543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.652472][T16547] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1980'. [ 644.665044][T16543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.736603][T16555] batadv7: entered promiscuous mode [ 644.755515][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1982'. [ 644.939389][T16555] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 645.136671][T16568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1979'. [ 645.147599][T16568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1979'. [ 645.445856][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1979'. [ 645.456050][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1979'. [ 645.486609][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 645.664423][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 645.698359][ T9] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 645.863621][ T9] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 645.972977][ T9] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 645.989928][ T9] usb 3-1: config 250 has no interface number 0 [ 646.224298][ T9] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 646.304880][ T9] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 646.318737][T16586] lo speed is unknown, defaulting to 1000 [ 646.344832][ T9] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 646.751765][ T9] usb 3-1: config 250 interface 228 has no altsetting 0 [ 646.775734][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 646.802467][ T9] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 646.832854][ T9] usb 3-1: Product: syz [ 646.858781][ T9] usb 3-1: SerialNumber: syz [ 646.895104][ T9] hub 3-1:250.228: bad descriptor, ignoring hub [ 646.924410][ T9] hub 3-1:250.228: probe with driver hub failed with error -5 [ 647.193685][ T9] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 72 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 648.135150][ T5962] usb 3-1: USB disconnect, device number 72 [ 648.145376][ T5962] usblp0: removed [ 648.220890][T16608] lo speed is unknown, defaulting to 1000 [ 648.424321][ T5962] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 648.744425][ T5962] usb 1-1: device descriptor read/64, error -71 [ 648.839113][T16663] fuse: Bad value for 'fd' [ 649.004361][ T5962] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 649.154316][ T5962] usb 1-1: device descriptor read/64, error -71 [ 649.272493][ T5962] usb usb1-port1: attempt power cycle [ 649.394592][ T30] audit: type=1400 audit(1756824751.300:1115): avc: denied { append } for pid=16668 comm="syz.1.1994" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 649.624307][ T5962] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 649.650911][ T5962] usb 1-1: device descriptor read/8, error -71 [ 649.905010][ T5962] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 649.936844][ T5962] usb 1-1: device descriptor read/8, error -71 [ 650.057068][ T5962] usb usb1-port1: unable to enumerate USB device [ 650.338636][T16702] overlayfs: failed to clone upperpath [ 651.653288][T16719] __nla_validate_parse: 1 callbacks suppressed [ 651.653327][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'. [ 652.108701][ T30] audit: type=1800 audit(1756824754.030:1116): pid=16732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2000" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 652.301669][T16739] netlink: 129704 bytes leftover after parsing attributes in process `syz.0.2002'. [ 652.573318][T16742] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 652.617291][T16742] overlayfs: missing 'lowerdir' [ 653.304098][T16754] netlink: 'syz.3.2008': attribute type 1 has an invalid length. [ 653.405821][T16775] overlayfs: failed to clone upperpath [ 653.470958][T16754] bond4: entered promiscuous mode [ 653.478948][T16754] 8021q: adding VLAN 0 to HW filter on device bond4 [ 653.828253][ T30] audit: type=1400 audit(1756824755.730:1117): avc: denied { mounton } for pid=16801 comm="syz.2.2006" path="/" dev="tmpfs" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 653.875189][T16810] overlayfs: failed to clone lowerpath [ 654.365163][ T30] audit: type=1326 audit(1756824756.300:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16822 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 654.464555][ T5962] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 654.482384][ T30] audit: type=1326 audit(1756824756.340:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16822 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 654.624866][ T30] audit: type=1326 audit(1756824756.340:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16822 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 654.712973][ T30] audit: type=1326 audit(1756824756.340:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16822 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 654.745166][ T5962] usb 1-1: Using ep0 maxpacket: 16 [ 654.758819][ T5962] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 654.774262][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.802678][ T30] audit: type=1326 audit(1756824756.350:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16822 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 654.826448][ T5962] usb 1-1: Product: syz [ 654.830623][ T5962] usb 1-1: Manufacturer: syz [ 654.854245][ T5962] usb 1-1: SerialNumber: syz [ 655.314984][ T5962] usb 1-1: config 0 descriptor?? [ 655.434837][ T5962] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 655.480266][ T30] audit: type=1326 audit(1756824756.350:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16822 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 655.669902][ T30] audit: type=1326 audit(1756824756.350:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16822 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 655.855176][ T5962] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 655.863405][T16816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.954780][T16816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.013649][ T30] audit: type=1326 audit(1756824756.350:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16822 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 656.084729][ T30] audit: type=1326 audit(1756824756.350:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16822 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3a98ebe9 code=0x7ffc0000 [ 656.178323][ T30] audit: type=1326 audit(1756824756.350:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16822 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c3a990b07 code=0x7ffc0000 [ 656.319676][ T30] audit: type=1326 audit(1756824756.350:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16822 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5c3a990a7c code=0x7ffc0000 [ 656.366977][T16846] netlink: 'syz.3.2017': attribute type 21 has an invalid length. [ 656.404490][T16846] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2017'. [ 656.421869][T16846] netlink: 'syz.3.2017': attribute type 4 has an invalid length. [ 656.588737][T16846] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2017'. [ 656.637461][T16850] batadv6: entered promiscuous mode [ 656.645888][T16850] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 656.819708][T16861] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 657.240866][ T5849] usb 1-1: USB disconnect, device number 61 [ 657.534593][ T5849] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 657.715685][ T5849] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 657.724913][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.756149][ T5849] usb 1-1: config 0 descriptor?? [ 657.796807][ T5849] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 657.816606][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2023'. [ 657.868029][T16881] netlink: 'syz.1.2023': attribute type 5 has an invalid length. [ 657.935928][T16881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2023'. [ 659.783335][ T5849] gp8psk: usb out operation failed. [ 659.789866][ T5849] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 659.800459][ T5849] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 659.829592][ T5849] usb 1-1: USB disconnect, device number 62 [ 660.024646][ T5923] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 660.236984][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 660.237023][ T30] audit: type=1400 audit(1756824762.170:1165): avc: denied { execute } for pid=16913 comm="syz.1.2030" path="/selinux/mls" dev="selinuxfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 660.268124][ T30] audit: type=1400 audit(1756824762.200:1166): avc: denied { map } for pid=16913 comm="syz.1.2030" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 660.306811][ T5923] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 660.321560][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.341866][ T5923] usb 3-1: config 0 descriptor?? [ 660.347384][ T51] Bluetooth: hci2: unexpected event for opcode 0x200d [ 660.358516][ T5923] pwc: Creative Labs Webcam 5 detected. [ 662.760508][T16958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.675009][ T5923] pwc: Failed to set LED on/off time (-71) [ 663.721633][ T5923] pwc: send_video_command error -71 [ 663.753238][ T5923] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 663.824402][ T5923] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 663.876027][ T5923] usb 3-1: USB disconnect, device number 73 [ 665.197771][T16977] netlink: 'syz.3.2039': attribute type 21 has an invalid length. [ 665.205712][T16977] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2039'. [ 665.405243][T16977] netlink: 'syz.3.2039': attribute type 4 has an invalid length. [ 665.413188][T16977] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2039'. [ 665.566239][T16989] batadv7: entered promiscuous mode [ 665.655599][T16989] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 665.698002][T17009] netlink: 'syz.2.2044': attribute type 1 has an invalid length. [ 665.706233][T17009] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2044'. [ 666.530594][ T30] audit: type=1400 audit(1756824768.460:1167): avc: denied { setattr } for pid=17010 comm="syz.0.2047" name="RAW" dev="sockfs" ino=44179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 666.680352][T17026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.726664][T17035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2051'. [ 666.941472][T17026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.130918][T17026] overlayfs: failed to resolve './file0': -2 [ 671.008065][T17097] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 671.008392][T17092] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 671.484765][T17102] netlink: 'syz.1.2059': attribute type 1 has an invalid length. [ 671.704498][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 671.874416][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 672.049531][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 672.069117][ T9] usb 1-1: config 0 has no interface number 0 [ 672.092829][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 672.125529][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 672.137495][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 672.153468][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 672.164454][ T9] usb 1-1: Product: syz [ 672.168673][ T9] usb 1-1: SerialNumber: syz [ 672.177636][ T9] usb 1-1: config 0 descriptor?? [ 672.186487][ T9] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 672.209390][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input23 [ 673.575628][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 673.818474][ T5863] usb 1-1: USB disconnect, device number 63 [ 673.922410][ T5863] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 674.173481][T17134] netlink: 'syz.1.2063': attribute type 4 has an invalid length. [ 674.339349][T17139] netlink: 'syz.4.2065': attribute type 10 has an invalid length. [ 674.348185][T17139] batman_adv: batadv0: Adding interface: team0 [ 674.356744][T17139] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.545029][T17139] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 675.867884][T17147] lo speed is unknown, defaulting to 1000 [ 675.876511][T17147] lo speed is unknown, defaulting to 1000 [ 675.890255][T17147] lo speed is unknown, defaulting to 1000 [ 675.916632][T17147] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 675.965563][T17147] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 676.617137][T17147] lo speed is unknown, defaulting to 1000 [ 676.751229][T17147] lo speed is unknown, defaulting to 1000 [ 676.866494][T17147] lo speed is unknown, defaulting to 1000 [ 676.892822][T17147] lo speed is unknown, defaulting to 1000 [ 676.926944][T17147] lo speed is unknown, defaulting to 1000 [ 676.954970][T17150] smc: removing ib device sz1 [ 677.661029][T17164] afs: Unknown parameter 'dy' [ 679.977466][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'. [ 680.771782][T17204] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 680.786641][T17202] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 680.796235][T17202] block device autoloading is deprecated and will be removed. [ 680.810424][T17204] block device autoloading is deprecated and will be removed. [ 680.813471][T17207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.326432][T17207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.729020][T17225] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2081'. [ 681.738128][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2081'. [ 681.747109][T17225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2081'. [ 683.375549][T17229] syz.0.2083 (17229): drop_caches: 2 [ 684.229481][T17279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.443608][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 684.470455][T17279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.525426][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 684.803373][T17295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2091'. [ 684.820023][T17295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2091'. [ 685.025444][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2093'. [ 685.057510][T17303] macsec1: entered promiscuous mode [ 685.391695][T17316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2094'. [ 685.450845][ T9] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 685.562306][T17319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.618132][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.631170][T17316] fuse: Unknown parameter 'fod' [ 685.877907][ T9] usb 1-1: device descriptor read/64, error -71 [ 685.884700][T17319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.106208][ T9] usb usb1-port1: attempt power cycle [ 686.484318][ T9] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 686.555414][ T9] usb 1-1: device descriptor read/8, error -71 [ 687.204327][ T9] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 687.234978][ T9] usb 1-1: device descriptor read/8, error -71 [ 687.354923][ T9] usb usb1-port1: unable to enumerate USB device [ 687.386185][ T30] audit: type=1400 audit(1756824789.320:1168): avc: denied { setopt } for pid=17334 comm="syz.1.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 687.618690][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2100'. [ 687.906125][ T30] audit: type=1400 audit(1756824789.840:1169): avc: denied { ioctl } for pid=17336 comm="syz.4.2098" path="socket:[45137]" dev="sockfs" ino=45137 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 687.957283][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 688.947341][T17371] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2106'. [ 689.073007][T17378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2108'. [ 689.264274][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 689.477127][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 689.487991][ T9] usb 3-1: can't read configurations, error -61 [ 689.624489][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 689.786435][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 689.825416][ T9] usb 3-1: can't read configurations, error -61 [ 689.856225][ T9] usb usb3-port1: attempt power cycle [ 690.224508][ T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 690.305409][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 690.314438][ T9] usb 3-1: can't read configurations, error -61 [ 690.390910][T17396] program syz.1.2113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 690.442213][T17396] sg_read: process 1597 (syz.1.2113) changed security contexts after opening file descriptor, this is not allowed. [ 690.514374][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 690.545359][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 690.553347][ T9] usb 3-1: can't read configurations, error -61 [ 690.562790][ T9] usb usb3-port1: unable to enumerate USB device [ 691.767285][T17412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.872285][T17412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.891538][T17412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2118'. [ 691.989968][ T30] audit: type=1400 audit(1756824793.900:1170): avc: denied { mount } for pid=17410 comm="syz.1.2118" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 692.068151][ T30] audit: type=1400 audit(1756824793.910:1171): avc: denied { watch } for pid=17410 comm="syz.1.2118" path="/412/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 692.161007][ T5962] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 692.344861][ T5962] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.406618][ T5962] usb 1-1: config 0 has no interfaces? [ 692.432412][ T5962] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 692.487182][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.541277][ T5962] usb 1-1: config 0 descriptor?? [ 692.664472][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 692.705860][ T30] audit: type=1400 audit(1756824794.620:1172): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 692.775593][T17441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.820490][T17441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.904599][T17445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.927932][ T9] usb 3-1: device descriptor read/64, error -71 [ 692.974998][T17441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.975313][T17445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.194293][ T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 693.204081][T17441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.334758][ T9] usb 3-1: device descriptor read/64, error -71 [ 693.445282][ T9] usb usb3-port1: attempt power cycle [ 693.921336][ T9] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 693.944911][ T9] usb 3-1: device descriptor read/8, error -71 [ 694.624346][ T9] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 694.691850][ T9] usb 3-1: device descriptor read/8, error -71 [ 694.814548][ T9] usb usb3-port1: unable to enumerate USB device [ 695.062095][ T5962] usb 1-1: string descriptor 0 read error: -71 [ 695.079119][ T5962] usb 1-1: USB disconnect, device number 68 [ 695.116383][T17468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.145327][T17468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.376145][T17409] delete_channel: no stack [ 695.532585][ T30] audit: type=1400 audit(1756824797.460:1173): avc: denied { audit_control } for pid=17481 comm="syz.2.2128" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 696.367895][T17503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.402382][T17503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.241731][ T30] audit: type=1400 audit(1756824799.160:1174): avc: denied { mount } for pid=17458 comm="syz.3.2124" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 698.158593][T17510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2130'. [ 699.067402][ T30] audit: type=1400 audit(1756824801.000:1175): avc: denied { setopt } for pid=17539 comm="syz.2.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 700.855673][T17568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 702.532494][ T30] audit: type=1400 audit(1756824804.460:1176): avc: denied { watch_sb } for pid=17581 comm="syz.1.2143" path="/419/file0" dev="tmpfs" ino=2292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 702.624162][T17593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.632974][T17593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.968794][T17600] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2145'. [ 704.884539][ T5849] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 705.055770][ T5849] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 705.070092][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.137163][T17635] afs: Unknown parameter 'dy' [ 705.324879][ T5849] usb 3-1: Product: syz [ 705.356271][ T5849] usb 3-1: Manufacturer: syz [ 705.395808][ T5849] usb 3-1: SerialNumber: syz [ 705.494503][ T5849] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 705.585425][ T30] audit: type=1400 audit(1756824807.510:1177): avc: denied { firmware_load } for pid=5863 comm="kworker/1:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 705.684947][ T5863] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 705.734377][ T30] audit: type=1400 audit(1756824807.640:1178): avc: denied { setopt } for pid=17641 comm="syz.1.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 705.787702][T17646] bridge0: port 1(gretap0) entered blocking state [ 705.883005][T17646] bridge0: port 1(gretap0) entered disabled state [ 705.904518][T17646] gretap0: entered allmulticast mode [ 705.932652][T17646] gretap0: entered promiscuous mode [ 705.960228][T17646] bridge0: port 1(gretap0) entered blocking state [ 705.967563][T17646] bridge0: port 1(gretap0) entered forwarding state [ 706.157239][ T9] usb 3-1: USB disconnect, device number 82 [ 706.698001][T17648] gretap0: left allmulticast mode [ 706.718554][T17648] gretap0: left promiscuous mode [ 706.724670][T17648] bridge0: port 1(gretap0) entered disabled state [ 706.815041][ T5863] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 706.907463][ T5863] ath9k_htc: Failed to initialize the device [ 706.928146][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 707.089206][ T30] audit: type=1400 audit(1756824809.010:1179): avc: denied { read } for pid=17676 comm="syz.3.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 707.287460][ T9] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 707.718443][T17680] lo speed is unknown, defaulting to 1000 [ 707.730272][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 707.771934][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.914312][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 707.944344][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.986945][ T9] usb 3-1: config 0 descriptor?? [ 709.469306][T17732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2165'. [ 709.716638][ T30] audit: type=1400 audit(1756824811.650:1180): avc: denied { create } for pid=17679 comm="syz.4.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 709.760058][ T30] audit: type=1400 audit(1756824811.670:1181): avc: denied { ioctl } for pid=17679 comm="syz.4.2161" path="socket:[46370]" dev="sockfs" ino=46370 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 709.795140][T17745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.804250][T17745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.894638][ T30] audit: type=1400 audit(1756824811.670:1182): avc: denied { bind } for pid=17679 comm="syz.4.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 709.914042][ C0] vkms_vblank_simulate: vblank timer overrun [ 709.930414][T17748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.939309][T17748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.056258][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 712.072101][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 712.103945][ T9] usb 3-1: USB disconnect, device number 83 [ 713.034308][ T9] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 713.496448][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 713.517642][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.574278][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 713.583383][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.665771][ T9] usb 3-1: config 0 descriptor?? [ 713.711094][T17803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2175'. [ 713.955844][ T9] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 714.113168][ T5863] usb 3-1: USB disconnect, device number 84 [ 714.149914][T17815] netlink: 'syz.4.2176': attribute type 21 has an invalid length. [ 714.158304][T17815] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2176'. [ 714.192154][T17815] netlink: 'syz.4.2176': attribute type 4 has an invalid length. [ 714.224892][T17815] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2176'. [ 714.338903][T17842] batadv5: entered promiscuous mode [ 714.353467][T17842] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 714.539739][T17841] netlink: 'syz.1.2177': attribute type 21 has an invalid length. [ 714.547844][T17841] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2177'. [ 714.556949][ T5962] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 714.567255][T17841] netlink: 'syz.1.2177': attribute type 4 has an invalid length. [ 714.575537][T17841] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2177'. [ 714.756374][T17841] batadv8: entered promiscuous mode [ 714.773841][ T5962] usb 1-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 714.793926][T17841] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 714.817597][ T5962] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.863767][ T5962] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.889613][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.908012][ T5962] usb 1-1: Product: syz [ 714.917576][ T5962] usb 1-1: Manufacturer: syz [ 714.929295][ T5962] usb 1-1: SerialNumber: syz [ 714.979825][ T5962] usb 1-1: selecting invalid altsetting 1 [ 714.986876][T17855] veth5: entered promiscuous mode [ 714.992062][T17855] veth5: entered allmulticast mode [ 715.224283][ T5962] usb 1-1: selecting invalid altsetting 1 [ 715.230115][ T5962] cdc_ncm 1-1:1.0: bind() failure [ 715.544335][T17873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.552911][T17873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.035052][ T51] Bluetooth: hci2: unexpected event for opcode 0x200d [ 716.059019][ T5962] usb 1-1: USB disconnect, device number 69 [ 716.947221][T17906] overlayfs: failed to clone upperpath [ 716.997415][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2186'. [ 717.433411][T17915] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2189'. [ 717.442510][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2189'. [ 717.451749][T17915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2189'. [ 717.995538][T17919] block nbd2: not configured, cannot reconfigure [ 718.274722][ T5962] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 718.381391][T17926] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 718.446219][ T5962] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 718.475518][ T5962] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 718.633781][ T5962] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 718.653184][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 719.230127][ T5962] usb 3-1: SerialNumber: syz [ 719.493396][ T5962] usb 3-1: 0:2 : does not exist [ 719.584793][ T5962] usb 3-1: USB disconnect, device number 85 [ 719.773399][ T30] audit: type=1400 audit(1756824821.700:1183): avc: denied { append } for pid=17961 comm="syz.1.2194" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 719.807406][T17962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.944731][T17962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.019169][T17962] input: syz0 as /devices/virtual/input/input24 [ 720.235896][ T51] Bluetooth: hci2: unexpected event for opcode 0x200d [ 721.555668][T17982] netlink: 'syz.3.2198': attribute type 21 has an invalid length. [ 721.563916][T17982] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2198'. [ 721.573442][T17982] netlink: 'syz.3.2198': attribute type 4 has an invalid length. [ 721.594414][T17982] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2198'. [ 721.826397][T17982] batadv8: entered promiscuous mode [ 721.833230][T17982] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 722.134327][ T5863] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 722.337113][ T5863] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 722.617055][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 723.304486][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 723.364545][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 723.384667][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 723.414508][ T5863] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 723.423635][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.474110][ T5863] usb 3-1: config 0 descriptor?? [ 723.489883][T17993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 723.967882][ T5863] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 724.161182][ T5863] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 724.244763][ T51] Bluetooth: hci2: unexpected event for opcode 0x200d [ 724.910267][T18045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2209'. [ 725.301111][T18045] 8021q: adding VLAN 0 to HW filter on device bond5 [ 725.364970][T18045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2209'. [ 725.389016][ T5863] usb 3-1: USB disconnect, device number 86 [ 725.504355][T18045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2209'. [ 725.552353][T18104] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2210'. [ 725.585896][T18046] 8021q: adding VLAN 0 to HW filter on device bond5 [ 725.698623][T18046] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 725.787119][T18046] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 725.927808][T18011] lo speed is unknown, defaulting to 1000 [ 726.724150][T18153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.742665][ T30] audit: type=1400 audit(1756824828.650:1184): avc: denied { create } for pid=18148 comm="syz.3.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 726.781918][T18153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.796205][T18153] program syz.1.2215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 727.191091][T18165] netlink: 'syz.3.2216': attribute type 1 has an invalid length. [ 727.281783][ T30] audit: type=1326 audit(1756824829.210:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18162 comm="syz.0.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 727.638378][ T51] Bluetooth: hci1: unexpected event for opcode 0x200d [ 727.921586][ T30] audit: type=1326 audit(1756824829.240:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18162 comm="syz.0.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 727.945409][ T30] audit: type=1326 audit(1756824829.240:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18162 comm="syz.0.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 728.138569][T18191] netlink: 'syz.1.2220': attribute type 1 has an invalid length. [ 728.272776][ T30] audit: type=1326 audit(1756824829.260:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18162 comm="syz.0.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 728.348584][T18165] 8021q: adding VLAN 0 to HW filter on device bond6 [ 728.390617][T18217] afs: Unknown parameter 'dy' [ 728.412868][ T30] audit: type=1326 audit(1756824829.260:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18162 comm="syz.0.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 728.490324][ T30] audit: type=1326 audit(1756824829.260:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18162 comm="syz.0.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 728.526299][ T30] audit: type=1326 audit(1756824830.300:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18162 comm="syz.0.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 728.583827][T18172] 8021q: adding VLAN 0 to HW filter on device bond6 [ 728.632341][ T30] audit: type=1326 audit(1756824830.300:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18162 comm="syz.0.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 728.671064][T18230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 728.699641][T18172] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 728.711760][T18172] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 728.721568][ T30] audit: type=1326 audit(1756824830.300:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18162 comm="syz.0.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef31b8ebe9 code=0x7ffc0000 [ 728.889592][T18174] macvlan2: entered promiscuous mode [ 728.908965][T18174] macvlan2: entered allmulticast mode [ 728.931450][T18174] bond6: entered promiscuous mode [ 728.965733][T18174] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 729.092942][T18174] bond6: left promiscuous mode [ 729.602664][T18191] 8021q: adding VLAN 0 to HW filter on device bond5 [ 729.688541][T18192] bond5: (slave ip6erspan0): making interface the new active one [ 729.709134][T18192] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 729.754304][T18296] overlayfs: failed to clone upperpath [ 730.364614][ T51] Bluetooth: hci4: unexpected event for opcode 0x200d [ 731.046636][T18316] afs: Unknown parameter 'dy' [ 731.475723][T18323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2235'. [ 732.307431][T18358] loop8: detected capacity change from 0 to 8 [ 732.359376][T18358] Dev loop8: unable to read RDB block 8 [ 732.365170][T18358] loop8: unable to read partition table [ 732.371138][T18358] loop8: partition table beyond EOD, truncated [ 732.377452][T18358] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 732.412523][T18361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2237'. [ 732.543433][T18361] netlink: 'syz.3.2237': attribute type 21 has an invalid length. [ 732.551798][T18361] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2237'. [ 732.561369][T18361] netlink: 'syz.3.2237': attribute type 4 has an invalid length. [ 732.569611][T18361] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2237'. [ 732.652394][T18361] batadv9: entered promiscuous mode [ 732.669999][T18361] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 732.940679][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'. [ 733.108311][T18371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'. [ 734.373289][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 734.373326][ T30] audit: type=1326 audit(1756824836.300:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18385 comm="syz.2.2243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb55d38ebe9 code=0x0 [ 735.429793][T18403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2247'. [ 736.305230][ T51] Bluetooth: hci3: unexpected event for opcode 0x080b [ 736.349368][ T30] audit: type=1400 audit(1756824838.280:1200): avc: denied { create } for pid=18411 comm="syz.1.2249" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 736.946998][ T30] audit: type=1400 audit(1756824838.880:1201): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 737.016018][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2253'. [ 737.088175][T18452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.134810][T18452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.207841][T18452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.247676][T18452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.277249][T18468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2258'. [ 737.377361][T18468] netlink: 'syz.4.2258': attribute type 21 has an invalid length. [ 737.385587][T18468] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2258'. [ 737.395902][T18468] netlink: 'syz.4.2258': attribute type 4 has an invalid length. [ 737.403777][T18468] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2258'. [ 737.473572][T18468] batadv6: entered promiscuous mode [ 737.490334][T18468] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 738.310159][T18491] fuse: Bad value for 'group_id' [ 738.315515][T18491] fuse: Bad value for 'group_id' [ 738.767690][T18499] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 739.272142][T18515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2267'. [ 739.532666][ T30] audit: type=1400 audit(1756824841.460:1202): avc: denied { node_bind } for pid=18520 comm="syz.3.2269" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 740.104628][ T5863] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 740.473424][T18531] batman_adv: batadv0: Interface deactivated: gretap2 [ 740.484104][ T5863] usb 3-1: config 127 has an invalid interface number: 127 but max is 0 [ 740.527367][ T5863] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 740.616104][ T5863] usb 3-1: config 127 has no interface number 0 [ 740.626591][T18539] : entered promiscuous mode [ 740.662996][ T5863] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=12.f5 [ 740.733693][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.779889][ T5863] option 3-1:127.127: GSM modem (1-port) converter detected [ 740.881451][T18556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2274'. [ 742.597367][ T5962] usb 3-1: USB disconnect, device number 87 [ 742.624638][ T5962] option 3-1:127.127: device disconnected [ 743.219242][T18592] lo speed is unknown, defaulting to 1000 [ 743.355530][ T30] audit: type=1400 audit(1756824845.020:1203): avc: denied { getopt } for pid=18584 comm="syz.2.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 743.757498][T18617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.805178][T18617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.894384][T18587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.973191][T18587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.995947][ T30] audit: type=1400 audit(1756824845.930:1204): avc: denied { connect } for pid=18625 comm="syz.2.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 744.015515][ C1] vkms_vblank_simulate: vblank timer overrun [ 744.178761][T18632] input: syz1 as /devices/virtual/input/input26 [ 744.185375][T18632] input: failed to attach handler leds to device input26, error: -6 [ 745.144773][ T5863] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 745.390643][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.453208][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 745.516782][ T5863] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 745.644904][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.715501][ T5863] usb 1-1: config 0 descriptor?? [ 745.941423][ T5863] usbhid 1-1:0.0: can't add hid device: -71 [ 745.978613][ T5863] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 746.001956][ T30] audit: type=1400 audit(1756824847.930:1205): avc: denied { getopt } for pid=18650 comm="syz.1.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 746.094966][ T5863] usb 1-1: USB disconnect, device number 70 [ 747.057772][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.178242][T18713] netlink: 'syz.0.2294': attribute type 21 has an invalid length. [ 748.186781][T18713] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2294'. [ 748.206355][T18713] netlink: 'syz.0.2294': attribute type 4 has an invalid length. [ 748.214789][T18713] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2294'. [ 748.295856][T18716] batadv8: entered promiscuous mode [ 748.311278][T18716] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 748.597443][T18722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2295'. [ 748.618164][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2295'. [ 750.654470][ T5863] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 750.835764][ T5863] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 750.878726][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.926469][ T5863] usb 1-1: Product: syz [ 750.952658][ T5863] usb 1-1: Manufacturer: syz [ 750.983781][ T5863] usb 1-1: SerialNumber: syz [ 751.038161][ T5863] usb 1-1: config 0 descriptor?? [ 751.247304][ T5863] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 751.748002][ T5863] pctv452e: pctv452e_power_ctrl: 1 [ 751.748002][ T5863] [ 751.762807][ T5863] usb 1-1: selecting invalid altsetting 3 [ 751.772313][T18756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.783265][ T5863] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 751.783265][ T5863] [ 751.811574][ T5863] dvb-usb: bulk message failed: -22 (5/0) [ 751.851035][T18756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.879717][ T5863] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 751.924520][ T5863] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 751.977347][T18756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.021088][T18756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.110421][T18756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.165013][T18790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.173742][T18756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.185345][T18790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.231868][ T5863] usb 1-1: USB disconnect, device number 71 [ 752.368201][ T30] audit: type=1400 audit(1756824854.290:1206): avc: denied { ioctl } for pid=18802 comm="syz.2.2309" path="socket:[47967]" dev="sockfs" ino=47967 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 753.713878][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2315'. [ 754.436434][T18841] trusted_key: encrypted_key: insufficient parameters specified [ 754.444926][T18841] trusted_key: encrypted_key: keyword 'neY7f‰ w' not recognized [ 754.456139][T18841] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 754.568045][T18836] netlink: 'syz.0.2313': attribute type 21 has an invalid length. [ 754.593274][T18836] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2313'. [ 754.683709][T18836] netlink: 'syz.0.2313': attribute type 4 has an invalid length. [ 754.715916][T18836] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2313'. [ 754.810935][T18849] ================================================================== [ 754.819021][T18849] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x7401/0x84c0 [ 754.826944][T18849] Read of size 1 at addr ffff8880531a4770 by task syz.3.2318/18849 [ 754.834836][T18849] [ 754.837164][T18849] CPU: 0 UID: 0 PID: 18849 Comm: syz.3.2318 Not tainted syzkaller #0 PREEMPT(full) [ 754.837192][T18849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 754.837210][T18849] Call Trace: [ 754.837218][T18849] [ 754.837224][T18849] dump_stack_lvl+0x116/0x1f0 [ 754.837244][T18849] print_report+0xcd/0x630 [ 754.837263][T18849] ? __virt_addr_valid+0x81/0x610 [ 754.837292][T18849] ? __phys_addr+0xe8/0x180 [ 754.837318][T18849] ? xfrm_state_find+0x7401/0x84c0 [ 754.837341][T18849] kasan_report+0xe0/0x110 [ 754.837355][T18849] ? xfrm_state_find+0x7401/0x84c0 [ 754.837369][T18849] xfrm_state_find+0x7401/0x84c0 [ 754.837381][T18849] ? arch_stack_walk+0xa6/0x100 [ 754.837399][T18849] ? __pfx_xfrm_state_find+0x10/0x10 [ 754.837424][T18849] ? find_held_lock+0x2b/0x80 [ 754.837458][T18849] ? bpf_ksym_find+0x127/0x1c0 [ 754.837485][T18849] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 754.837504][T18849] xfrm_resolve_and_create_bundle+0x4cd/0x3740 [ 754.837525][T18849] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 754.837550][T18849] ? dst_alloc+0xc0/0x1a0 [ 754.837569][T18849] ? xfrm_expand_policies.constprop.0+0x252/0x6a0 [ 754.837599][T18849] xfrm_lookup_with_ifid+0x2a0/0x1e40 [ 754.837625][T18849] ? find_held_lock+0x2b/0x80 [ 754.837641][T18849] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 754.837657][T18849] ? ip_route_output_key_hash+0x16b/0x2e0 [ 754.837678][T18849] xfrm_lookup_route+0x3b/0x200 [ 754.837693][T18849] ip_route_output_flow+0x11e/0x150 [ 754.837725][T18849] udp_sendmsg+0x1af9/0x2870 [ 754.837751][T18849] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 754.837777][T18849] ? avc_has_perm_noaudit+0xf0/0x3b0 [ 754.837791][T18849] ? __pfx_udp_sendmsg+0x10/0x10 [ 754.837804][T18849] ? avc_has_perm+0x144/0x1f0 [ 754.837819][T18849] ? sock_has_perm+0x259/0x2f0 [ 754.837832][T18849] ? __pfx_sock_has_perm+0x10/0x10 [ 754.837854][T18849] ? __import_iovec+0x1dd/0x650 [ 754.837881][T18849] ? __might_fault+0xe3/0x190 [ 754.837899][T18849] ? __might_fault+0x13b/0x190 [ 754.837919][T18849] ? __pfx_udp_sendmsg+0x10/0x10 [ 754.837935][T18849] inet_sendmsg+0x105/0x140 [ 754.837952][T18849] ____sys_sendmsg+0x973/0xc70 [ 754.837968][T18849] ? copy_msghdr_from_user+0x10a/0x160 [ 754.837980][T18849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 754.838011][T18849] ___sys_sendmsg+0x134/0x1d0 [ 754.838034][T18849] ? __pfx____sys_sendmsg+0x10/0x10 [ 754.838064][T18849] ? find_held_lock+0x2b/0x80 [ 754.838085][T18849] __sys_sendmmsg+0x200/0x420 [ 754.838098][T18849] ? __pfx___sys_sendmmsg+0x10/0x10 [ 754.838112][T18849] ? __pfx_do_futex+0x10/0x10 [ 754.838150][T18849] ? xfd_validate_state+0x61/0x180 [ 754.838182][T18849] ? __sys_setsockopt+0x1c0/0x230 [ 754.838214][T18849] __x64_sys_sendmmsg+0x9c/0x100 [ 754.838227][T18849] ? lockdep_hardirqs_on+0x7c/0x110 [ 754.838242][T18849] do_syscall_64+0xcd/0x4c0 [ 754.838257][T18849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.838270][T18849] RIP: 0033:0x7f9d95d8ebe9 [ 754.838285][T18849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.838308][T18849] RSP: 002b:00007f9d96c0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 754.838329][T18849] RAX: ffffffffffffffda RBX: 00007f9d95fc6090 RCX: 00007f9d95d8ebe9 [ 754.838343][T18849] RDX: 0400000000000077 RSI: 0000200000000180 RDI: 0000000000000006 [ 754.838358][T18849] RBP: 00007f9d95e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 754.838367][T18849] R10: 0000000000007600 R11: 0000000000000246 R12: 0000000000000000 [ 754.838374][T18849] R13: 00007f9d95fc6128 R14: 00007f9d95fc6090 R15: 00007fff7a1a2be8 [ 754.838387][T18849] [ 754.838392][T18849] [ 755.193347][T18849] Allocated by task 6574: [ 755.197656][T18849] kasan_save_stack+0x33/0x60 [ 755.202320][T18849] kasan_save_track+0x14/0x30 [ 755.206978][T18849] __kasan_slab_alloc+0x89/0x90 [ 755.211814][T18849] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 755.217256][T18849] xfrm_state_alloc+0x23/0x5c0 [ 755.222008][T18849] __find_acq_core+0xb59/0x2900 [ 755.226840][T18849] xfrm_find_acq+0x7b/0xa0 [ 755.231238][T18849] pfkey_getspi+0xa62/0xeb0 [ 755.235740][T18849] pfkey_process+0x6dc/0x840 [ 755.240315][T18849] pfkey_sendmsg+0x435/0x850 [ 755.244891][T18849] ____sys_sendmsg+0xa98/0xc70 [ 755.249647][T18849] ___sys_sendmsg+0x134/0x1d0 [ 755.254319][T18849] __sys_sendmsg+0x16d/0x220 [ 755.258906][T18849] do_syscall_64+0xcd/0x4c0 [ 755.263399][T18849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.269283][T18849] [ 755.271596][T18849] Freed by task 5944: [ 755.275557][T18849] kasan_save_stack+0x33/0x60 [ 755.280228][T18849] kasan_save_track+0x14/0x30 [ 755.284892][T18849] kasan_save_free_info+0x3b/0x60 [ 755.289911][T18849] __kasan_slab_free+0x60/0x70 [ 755.294658][T18849] kmem_cache_free+0x2d1/0x4d0 [ 755.299417][T18849] xfrm_state_gc_task+0x50a/0x770 [ 755.304427][T18849] process_one_work+0x9cf/0x1b70 [ 755.309350][T18849] worker_thread+0x6c8/0xf10 [ 755.313951][T18849] kthread+0x3c5/0x780 [ 755.318003][T18849] ret_from_fork+0x5d4/0x6f0 [ 755.322579][T18849] ret_from_fork_asm+0x1a/0x30 [ 755.327331][T18849] [ 755.329645][T18849] The buggy address belongs to the object at ffff8880531a4440 [ 755.329645][T18849] which belongs to the cache xfrm_state of size 928 [ 755.343589][T18849] The buggy address is located 816 bytes inside of [ 755.343589][T18849] freed 928-byte region [ffff8880531a4440, ffff8880531a47e0) [ 755.357364][T18849] [ 755.359668][T18849] The buggy address belongs to the physical page: [ 755.366077][T18849] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880531a6a80 pfn:0x531a4 [ 755.376139][T18849] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 755.384629][T18849] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 755.392192][T18849] page_type: f5(slab) [ 755.396165][T18849] raw: 00fff00000000040 ffff888023efdb40 dead000000000122 0000000000000000 [ 755.404730][T18849] raw: ffff8880531a6a80 00000000800f0008 00000000f5000000 0000000000000000 [ 755.413297][T18849] head: 00fff00000000040 ffff888023efdb40 dead000000000122 0000000000000000 [ 755.421960][T18849] head: ffff8880531a6a80 00000000800f0008 00000000f5000000 0000000000000000 [ 755.430612][T18849] head: 00fff00000000002 ffffea00014c6901 00000000ffffffff 00000000ffffffff [ 755.439262][T18849] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 755.447906][T18849] page dumped because: kasan: bad access detected [ 755.454355][T18849] page_owner tracks the page as allocated [ 755.460055][T18849] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6191, tgid 6190 (syz.3.52), ts 92759050608, free_ts 92700128183 [ 755.478983][T18849] post_alloc_hook+0x1c0/0x230 [ 755.483756][T18849] get_page_from_freelist+0x132b/0x38e0 [ 755.489290][T18849] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 755.495167][T18849] alloc_pages_mpol+0x1fb/0x550 [ 755.500002][T18849] new_slab+0x247/0x330 [ 755.504152][T18849] ___slab_alloc+0xcf2/0x1740 [ 755.508818][T18849] __slab_alloc.constprop.0+0x56/0xb0 [ 755.514179][T18849] kmem_cache_alloc_noprof+0xef/0x3b0 [ 755.519542][T18849] xfrm_state_alloc+0x23/0x5c0 [ 755.524298][T18849] xfrm_add_sa+0x1283/0x5c50 [ 755.528871][T18849] xfrm_user_rcv_msg+0x58b/0xc00 [ 755.533787][T18849] netlink_rcv_skb+0x155/0x420 [ 755.538535][T18849] xfrm_netlink_rcv+0x71/0x90 [ 755.543201][T18849] netlink_unicast+0x5aa/0x870 [ 755.547949][T18849] netlink_sendmsg+0x8d1/0xdd0 [ 755.552697][T18849] ____sys_sendmsg+0xa98/0xc70 [ 755.557447][T18849] page last free pid 6192 tgid 6188 stack trace: [ 755.563753][T18849] register_dummy_stack+0x89/0xd0 [ 755.568772][T18849] init_page_owner+0x48/0x7e0 [ 755.573441][T18849] page_ext_init+0x703/0xb00 [ 755.578011][T18849] mm_core_init+0x13c/0x220 [ 755.582501][T18849] [ 755.584802][T18849] Memory state around the buggy address: [ 755.590411][T18849] ffff8880531a4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 755.598456][T18849] ffff8880531a4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 755.606496][T18849] >ffff8880531a4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 755.614535][T18849] ^ [ 755.622237][T18849] ffff8880531a4780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 755.630284][T18849] ffff8880531a4800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 755.638322][T18849] ================================================================== [ 755.700669][T18836] batadv9: entered promiscuous mode [ 755.718833][T18836] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 755.764455][T18849] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 755.771705][T18849] CPU: 1 UID: 0 PID: 18849 Comm: syz.3.2318 Not tainted syzkaller #0 PREEMPT(full) [ 755.781069][T18849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 755.791102][T18849] Call Trace: [ 755.794361][T18849] [ 755.797270][T18849] dump_stack_lvl+0x3d/0x1f0 [ 755.801854][T18849] vpanic+0x6e8/0x7a0 [ 755.805833][T18849] ? __pfx_vpanic+0x10/0x10 [ 755.810317][T18849] ? __pfx_vprintk_emit+0x10/0x10 [ 755.815319][T18849] ? xfrm_state_find+0x7401/0x84c0 [ 755.820442][T18849] panic+0xca/0xd0 [ 755.824177][T18849] ? __pfx_panic+0x10/0x10 [ 755.828616][T18849] ? xfrm_state_find+0x7401/0x84c0 [ 755.833736][T18849] ? preempt_schedule_common+0x44/0xc0 [ 755.839176][T18849] ? preempt_schedule_thunk+0x16/0x30 [ 755.844537][T18849] check_panic_on_warn+0xab/0xb0 [ 755.849467][T18849] end_report+0x107/0x170 [ 755.853771][T18849] kasan_report+0xee/0x110 [ 755.858162][T18849] ? xfrm_state_find+0x7401/0x84c0 [ 755.863252][T18849] xfrm_state_find+0x7401/0x84c0 [ 755.868159][T18849] ? arch_stack_walk+0xa6/0x100 [ 755.872990][T18849] ? __pfx_xfrm_state_find+0x10/0x10 [ 755.878249][T18849] ? find_held_lock+0x2b/0x80 [ 755.882926][T18849] ? bpf_ksym_find+0x127/0x1c0 [ 755.887665][T18849] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 755.893809][T18849] xfrm_resolve_and_create_bundle+0x4cd/0x3740 [ 755.899944][T18849] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 755.906522][T18849] ? dst_alloc+0xc0/0x1a0 [ 755.910821][T18849] ? xfrm_expand_policies.constprop.0+0x252/0x6a0 [ 755.917208][T18849] xfrm_lookup_with_ifid+0x2a0/0x1e40 [ 755.922556][T18849] ? find_held_lock+0x2b/0x80 [ 755.927205][T18849] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 755.932987][T18849] ? ip_route_output_key_hash+0x16b/0x2e0 [ 755.938699][T18849] xfrm_lookup_route+0x3b/0x200 [ 755.943541][T18849] ip_route_output_flow+0x11e/0x150 [ 755.948745][T18849] udp_sendmsg+0x1af9/0x2870 [ 755.953321][T18849] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 755.958848][T18849] ? avc_has_perm_noaudit+0xf0/0x3b0 [ 755.964120][T18849] ? __pfx_udp_sendmsg+0x10/0x10 [ 755.969032][T18849] ? avc_has_perm+0x144/0x1f0 [ 755.973685][T18849] ? sock_has_perm+0x259/0x2f0 [ 755.978424][T18849] ? __pfx_sock_has_perm+0x10/0x10 [ 755.983564][T18849] ? __import_iovec+0x1dd/0x650 [ 755.988391][T18849] ? __might_fault+0xe3/0x190 [ 755.993042][T18849] ? __might_fault+0x13b/0x190 [ 755.997778][T18849] ? __pfx_udp_sendmsg+0x10/0x10 [ 756.002692][T18849] inet_sendmsg+0x105/0x140 [ 756.007177][T18849] ____sys_sendmsg+0x973/0xc70 [ 756.011939][T18849] ? copy_msghdr_from_user+0x10a/0x160 [ 756.017376][T18849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 756.022641][T18849] ___sys_sendmsg+0x134/0x1d0 [ 756.027302][T18849] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.032476][T18849] ? find_held_lock+0x2b/0x80 [ 756.037133][T18849] __sys_sendmmsg+0x200/0x420 [ 756.041793][T18849] ? __pfx___sys_sendmmsg+0x10/0x10 [ 756.046972][T18849] ? __pfx_do_futex+0x10/0x10 [ 756.052934][T18849] ? xfd_validate_state+0x61/0x180 [ 756.058029][T18849] ? __sys_setsockopt+0x1c0/0x230 [ 756.063025][T18849] __x64_sys_sendmmsg+0x9c/0x100 [ 756.067934][T18849] ? lockdep_hardirqs_on+0x7c/0x110 [ 756.073107][T18849] do_syscall_64+0xcd/0x4c0 [ 756.077593][T18849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.083478][T18849] RIP: 0033:0x7f9d95d8ebe9 [ 756.087865][T18849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.107457][T18849] RSP: 002b:00007f9d96c0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 756.115843][T18849] RAX: ffffffffffffffda RBX: 00007f9d95fc6090 RCX: 00007f9d95d8ebe9 [ 756.123806][T18849] RDX: 0400000000000077 RSI: 0000200000000180 RDI: 0000000000000006 [ 756.131754][T18849] RBP: 00007f9d95e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 756.139706][T18849] R10: 0000000000007600 R11: 0000000000000246 R12: 0000000000000000 [ 756.147928][T18849] R13: 00007f9d95fc6128 R14: 00007f9d95fc6090 R15: 00007fff7a1a2be8 [ 756.155881][T18849] [ 756.159095][T18849] Kernel Offset: disabled [ 756.163404][T18849] Rebooting in 86400 seconds..