last executing test programs: 4.923824597s ago: executing program 1 (id=907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="006d411b67", 0x5}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x48090}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r2, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d8", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000000)={0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 4.825313796s ago: executing program 1 (id=908): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x8, {0x0, 0xfffffffb, 0x0, '\x00', {0x200, 0x5d856276, 0xadf, 0x804, r1, r2, 0x4000, '\x00', 0x100000007, 0x8, 0xffffffff, 0x3, {0x8, 0x7}, {0x7, 0x3}, {0x0, 0x7}, {0x1000000000, 0x9fc}, 0xd, 0xa, 0xfffffffe, 0x1009}}}}) setresgid(r2, r2, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4.630957919s ago: executing program 1 (id=909): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905820207"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$uac2(0x6, 0x11b, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x109, 0x3, 0x1, 0xe5, 0x0, 0x2a, {0x8, 0xb, 0x2, 0x0, 0x1, 0xff, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0xa, 0x48, 0xf}, [@feature_unit={0xd, 0x24, 0x6, 0x3, 0x6, [0x2, 0x5, 0x1, 0x9]}, @processing_unit={0x9, 0x24, 0x8, 0x1, 0x3, [0x0, 0x4]}, @extension_unit={0xb, 0x24, 0x9, 0x5, 0x5, 0x5, "83016d4d"}, @output_terminal={0xc, 0x24, 0x3, 0x4, 0x304, 0x1, 0x1, 0x6, 0x727, 0x7}, @extension_unit={0xa, 0x24, 0x9, 0x1, 0xfff7, 0x9, "0becdd"}, @source_unit={0x8, 0x24, 0xa, 0x50, 0x3, 0xf8, 0x3c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x4, 0x0, 0x66, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x8, 0x1, 0x8, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0x9, 0xf8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x3f}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xffff, 0x5, 0x5, "3d0089597d"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x9, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x40, 0x6, 0x6, {0x8, 0x25, 0x1, 0x82, 0x33, 0x4, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0x9, 0x1, 0x5, 0x7, 0xbc, 0x4}, @as_header={0x10, 0x24, 0x1, 0x5, 0x6, 0x1, 0x1001, 0x1, 0x200, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x3, 0x3, 0xfc}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x9, 0x9c, {0x8, 0x25, 0x1, 0x2, 0x0, 0x6, 0x81}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x5, 0xb6, 0x3, 0x8, 0x6}, 0x54, &(0x7f00000002c0)={0x5, 0xf, 0x54, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x16, 0x8}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x6, 0xbc80}, @ssp_cap={0x24, 0x10, 0xa, 0xfe, 0x6, 0x4, 0xf000, 0x9, [0x0, 0xc028, 0xff, 0xffc000, 0x0, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "1be1f26d30274ad1f506fd9f8a5d10e3"}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.630458323s ago: executing program 0 (id=910): setresgid(0x0, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0xffc3, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4.423941712s ago: executing program 0 (id=912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x4048aec9, &(0x7f0000000180)={[{0x5, 0x10, 0x0, 0x0, 0x4, 0x0, 0xfe, 0x5, 0x4, 0x8, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, {0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x4, 0x0, 0x4d, 0x0, 0x0, 0xff, 0x800}], 0xfffffffc}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800650042000100fffffffffddbdf25fba00200000004003880100001800c00c8000200000000000000100040000400c98008003500", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 4.287493335s ago: executing program 2 (id=913): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r1, &(0x7f0000000200)=@generic, &(0x7f0000000280)=0x80, 0x80800) ioctl$VHOST_SET_VRING_NUM(r0, 0x8008af00, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380002960000000904cc0700025961050524060001052402"], 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x24, r3, 0xd66771a5e8224ded, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7d}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0xc0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4(r1, &(0x7f0000000200)=@generic, &(0x7f0000000280)=0x80, 0x80800) (async) ioctl$VHOST_SET_VRING_NUM(r0, 0x8008af00, &(0x7f00000000c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380002960000000904cc0700025961050524060001052402"], 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x24, r3, 0xd66771a5e8224ded, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7d}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0xc0) (async) 4.27972771s ago: executing program 0 (id=914): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "53c590deb708ce8227364ab5ff433ca6a3f65f90"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1002, @private=0xa010101}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}}]}, 0x70}, 0x1, 0x7}, 0x0) (async) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000080)=0x7b1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000000c0)=0x3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211"], 0x68}}, 0x0) 4.028626345s ago: executing program 0 (id=916): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) prctl$PR_GET_FPEXC(0x45, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 4.003124748s ago: executing program 0 (id=917): setresgid(0x0, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) r2 = syz_usb_connect$uac3(0x2, 0x10c, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x21b4, 0x81, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfa, 0x3, 0x1, 0xb3, 0x48, 0x2, {0x8, 0xb, 0x8, 0x2, 0x1, 0x24}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x4f, 0x100}, [@multiply_unit={0xb, 0x24, 0xd, 0xfd, 0x7, 0x7, 0x1}, @output_terminal={0x13, 0x24, 0x3, 0x5, 0x1ff, 0x1, 0x5, 0x4, 0x1000, 0x2, 0x9, 0x81}, @power_domain={0x9, 0x24, 0x10, 0x6, 0x68, 0x7, 0x3}, @output_terminal={0x13, 0x24, 0x3, 0x5, 0x401, 0x5, 0x3, 0x2, 0x6, 0x345, 0x401, 0x3}, @multiply_unit={0xb, 0x24, 0xd, 0x5, 0xc, 0xffffa099, 0x8c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0xc9, 0x6, 0x0, 0x9}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x98, 0x3, 0x4, 0xaa}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x52, 0x8, 0x2, {0xa, 0x25, 0x25, 0x0, 0xc2, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x4, 0xd2, 0x5, "c4d37c7a69ee"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x2, 0x2, 0x4, "8ec9f636eced80"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x96, 0x7, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xcd, 0xc, 0xfe, 0x5, 0xa}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x3, 0x7, {0xa, 0x25, 0x25, 0x9, 0x0, 0x69c}}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x110, 0xa, 0x5, 0x0, 0x20, 0x6b}, 0x5d, &(0x7f0000000140)={0x5, 0xf, 0xfffffeb7, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xde, 0x6, 0x101, 0xf000, 0xcbf, [0xba76f8203c9fde2d, 0xf, 0xff00, 0xffc000, 0xc0, 0xff3f30]}, @ss_cap={0x0, 0x10, 0x3, 0x2, 0x8, 0x6, 0x5, 0xb5c1}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x8, 0xf000, 0x0, [0xffc000, 0xf0, 0x0, 0xffff0f, 0x0, 0xc000]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x6, 0x8}]}, 0x8, [{0x4, &(0x7f0000000040)=@string={0x0, 0x3, "9c501a61b62c09054d6f29fbbaa979248a1578"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x6b, &(0x7f0000000700)=@string={0x6b, 0x3, "193d49d847bc82da9ead8cc6aafaeaba09e3dfe16e55db6323d3ed608c93de3dd70c94e40f602f9cc002013d1a7f5966147d409e3bbb2c9acf73423412f1f67818e2b1a9b1e9b80ea298ef194f36ceafa614f06058f1fa254de4392d4fe2035dd972d5469da8c1b97e"}}, {0xe8, &(0x7f0000000780)=@string={0xe8, 0x3, "f840050deae1760a08e29c00f80315baf671bd1f21b07c540a2baa0117a30bb377fdcef90c924981673e801313df16208db62f902a1f611e187b21b373bed27f6d100cdf42279526b08067ff81ea1ac1b74c7bc41fdf8819f133e0de4d78c46028bc610e211e8ba136f879c13e8431ef3df5a21ff9832a7d613e8210f29bdf770fd409c85775cc78f9b756ddbba06ea2e2896cbec4a1cccfdebb367858ef21e1551412e517bd6c5626166f9d45fc48ab2995b73592abd6b46bff2fd98b30ecec83ea001ac812d33de7d810b0a5bfcb4226258beead97870af3d85a05323f7f3eb9bd7ed842ae"}}, {0xd0, &(0x7f0000000880)=@string={0xd0, 0x3, "79485a06bad0f8a4c23d2ac495b788ee1287b83bb57ead3c4dff25acb9bcdb00aa6096b21fb0212acc159dea231bf24df537088a1eeb61d5ea85ae09fbaaf2172ef3017542a062c41e5c6abc710cb4b10c1a595050d89ebc8aeb21116c0c1a4bd18a58db1faf40a4b604f7b0499cbbcbebd35aff2e31f6abd7c446aef60d537d518cc2ca9bf5213a14398e5615b9b86ee0338adfc806eace712b8e15c186153ecf2c34b5e8395eb2025aa9a339fd8a6c5966556ca5453217916db8bd98c4f43718ad03c5d88c723497dc241c641d"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x814}}]}) syz_usb_control_io$uac3(r2, &(0x7f0000000bc0)={0x14, &(0x7f0000000a80)={0x20, 0x2, 0x21, {0x21, 0x21, "5bb4d40aa8ccd690adf578544836c979591db43e56d7bc211af55c79363126"}}, &(0x7f0000000ac0)={0x0, 0x3, 0xd9, @string={0xd9, 0x3, "b3ada61d0c32ea93eb11e67518c7495cea14599309bb19eb77c0ad62d3cc9f0a873e4a563c25df478d1d69793c9d10e2daedcc3758bbe56201bac6e31bc4786e126b324dcb146207dafef053869f32dbfb95fdc067af14cdd4c930a4294c17f045b1a0e56dba527f57cce3d76fba25a2b3caf875c3030139fe7f6930cd7d13f3ef3320ccd8d87df83981f312a0ff56bd1a5e9b4af033d90237f142eb073456496b9245813ec9ea7ef26bda516f2d5c92aedcb04d40d78af7d5156626c7260049d443b9fbafbe9b168b85f0f3fb5fa3b775ff99d55aec20"}}}, &(0x7f0000000dc0)={0x44, &(0x7f0000000c00)={0x40, 0x1, 0xd, "9ba38e309513865a57fd965d77"}, &(0x7f0000000c40)={0x0, 0xa, 0x1}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x1}, 0xfffffffffffffffc, &(0x7f0000000cc0)={0x20, 0x82, 0x3, "3bee7a"}, &(0x7f0000000d00)={0x20, 0x83, 0x1, "e8"}, &(0x7f0000000d40)={0x20, 0x84, 0x2, "ccda"}, &(0x7f0000000d80)={0x20, 0x85, 0x3, "51f3c1"}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3.739138859s ago: executing program 3 (id=919): syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x20, 0x20, 0x2a, {0x2a, 0x2d, "cb6aa6f33e20bf4d85eac1c6d0b29a958e507a941863f508b9e25ea132fe32cca14a92fd0c733d80"}}, &(0x7f0000000380)={0x0, 0x3, 0x88, @string={0x88, 0x3, "aa5c9cb383eb74f761cfaa8e84b15b8b376b0290141c8b42d281131f1b16e2e2975627cb80c315cdb475e6b4881c4a2134eec9303aa53f9b99b0bd3d940223339666c80ab6dde7f74cd016e72910241731fa7d16b30cf03dc244a861eb418e15835b30229f08a9c29ef4ffecb6307efa689cac81f0b2d989c7ffacd0ca4ffd75532659de8dcc"}}}, &(0x7f0000000340)={0x34, &(0x7f00000001c0)={0x20, 0x16, 0x2c, "630366f4263dbfb25b412f00786b1805211c53f619abcea379279f13c7d340aea0bbddd5bab81ff7e4c6cc7a"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000280)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f00000002c0)={0x40, 0xa0, 0x4, 0x10001}, &(0x7f0000000300)={0xc0, 0xa2, 0x2f, "356105f3aabe9b52859955b992d4d7c49f44a103447c81b46865751a60b443cb40ce57625bcdec0fb468f38eb200"}}) syz_usb_control_io(r0, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000306000000060347"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000040)=[{0xd, 0x2801, 0x0, 0x0}], 0x1}) 3.454290045s ago: executing program 2 (id=920): setresgid(0x0, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0xffd8, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3.341581136s ago: executing program 2 (id=921): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x41, &(0x7f0000000000)=0x6, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000580)={0x378e5f2d9c745e8f, 0x10, 0x6, "e45dbfc3abee"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000440)={0x20, 0xd, 0x5, "a8b12515e8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$can_j1939(r2, &(0x7f0000000280)={0x1d, r3, 0x3, {0x1, 0x0, 0x1}, 0x1}, 0x18) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x40, 0xffffffffffffffff, 0x80000}) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x4000000) inotify_init() ioctl$VHOST_VDPA_SET_CONFIG(r5, 0x4008af74, &(0x7f00000001c0)={0xac1, 0x4d, "cf2f926d87e2c8ee1e756cd14697a85642cade8238d5c080c3a0d62a551e07d33599f7cfe4933a99726b27434a5acff201f1c1b4b6ab65bab3de7c04da570bec30de07dfce3989d353579ee206"}) 2.507229321s ago: executing program 1 (id=922): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f00000003c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x4b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x40}, 0x1, 0x0, 0x0, 0x4881}, 0x200040c5) 2.479244239s ago: executing program 1 (id=923): r0 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "1713"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "c001"}, @main=@item_4={0x3, 0x0, 0x8, "4492796d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) 2.056192344s ago: executing program 0 (id=924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000000100000000000000000000000000400"], 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x24040094) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x9, 0x8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) listen(r1, 0x9) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000340)={{r1}, "8240e157f885fc8e6cf8aa5f48cab02613a488b3c2ec4d14fc7181edacd9463373bd9df98c8aac720f9c32f8b1c39d8a239173d8047910eeb88ba4a4c06585d5e25cfe5162a4c43484301d4bc2765e64bbde79f0ba320f487be546207252bd7cd4d2458e6038819fc9ef6e87efb8c60659f624525f9de16bbbf6da8a98da031ea913b9baeef41880422bbbe3989301a094ed424fb6a4bec1257be8fb520a4f6c3fc47069af4c7039958d36ce3151db25d16e5a8ba9b2ab00063b773708dce90be829aaa23e43bcbc09db4260fa165c23dcf692e2683a1ccc8c1634948f51b31399368957b8f95320a7e221bb217019bb5aafe056e8a9ea16587055de468f3eea4db7bc14a51eff2342ec2cb0d9a225793e1c7938a9d37ec0dd2825acaa71e865fb75737facae6fdd13ad746d4cfde995a08d1dd90e0d3d6de3e3f0c8067f8b9a0ab641869788d41ac335b5287a4b87c77969d92501956e4b28b23ffb4b2d1db13367ba55911fe12ff08dd0273a10cefd3b18aedba063acf13e83ea9be136eee42ab2d43d5d62a01a83c8ab5e6857bbf02ad775cc1ec427617d8d303377f904b2b44db90aa46742992132fc1f4456863b25704f3c063c09afeada2389b9e04b857d1519801175b845adad378d4e522ef5088a82b5c1aa399a1c1ec90fca3a561fe48889f347e524d2c13f5d733fb22d0823c3efa244b1f91a27e1ed0abfbd23f2c3b7fcfea4221f5c559a517deb257aedc3675731af0e8b2d9859cf0b51e693445c677983c0d756794eba67813ed38e66beeb45d0cc3d119a4ceffa15633ea47f4897fff5ff5288ce948f3c0d278884b8e760b062d19a95ef9f4d68fc5c2fbb09075bc1d2abfe23db44d31288c6fc543055bb1a7c42de33dea0727b7d00814341bbd8113a664dd6bc8d717c9b5e7fc111769d8bd8b76e5058a5276c6bc4ee2d9d4c2828d870e2f8ac929ad8f3aad65dc0902d3e733db4afbe7e67536f7202d35a0d6bfeaf7487dcd29f5861134280e7a57ba267781df2e1733c8838cf685171d808c24471aad92a7cc6d70261a3cbdaeb0c26d73f9705a74a4daa3aaf7d8f1f6dcc942c9eeeb4eb8fa85eaf1f5b9ae2f4611e43a6b14f232698ccd15a5ad53163166d0a96746ccb9409dbb9ca22ae0a6f3bef4ae2bedca4e38f824ff7d3f1e7289c4842feca205eb97c6eaa1b867cfaff2e29ede79fe969e03fe96e839c6573d170a4745680d0bdd8dcccfe419f81a9f92681936aa52abe00046a7fbcf9af614fa6c93bc62bb1bc478b14dfc77ae917e4cfd8b22048a3babaa07e39821aea1acbc7b72323618b89138d5b4fe7b74bb5a607264e2a6dde2e205ed2962420c78790274b82cf921ee3a04c4f8f8e7f40ff0e73bc479f1221791b5589f3434a3065125850e0c5dabd0d643ce7e6a02723429baf7e8e6335d13ba709f70b7a5aa87e8e38c6317ba6da9fc87d4ac97f0604ca45dd1bd032dbf764d66acce86900a72060097b9e541b6995d0d3d05a1fad89ca3aee9823cc41ad07e8b3d2eb840479ceeef8c4e391c8e2ae6522edf58faa01fa0beb8bea87b0c33a859a6a796ad8a96fbdb62b27910abf46bf7b906759a817523639c8d523650cfe5531abd84f2832c60561a0045342fca30cbb6bebbd908815203aec9a07033d4b0936862a42061e69607bceceb173d1714e49dc8c610b9fa3012b781af5bdf77b2860f657ab177255bc01c8f8f92891ba72f3705a5d2075f8dd4c41c7c4aec6fc8412c7cc9010c381bae785f7adece9de068cd12452c30b42dbafe32997342a15b38ba853aa8f55c18ec3d857fe452d7dcd42e2eab551b8680ebb773a6e3056991d2fd0b93b81da5fd8b0dcca45bab8ca032ecbdf2ae9e74c9c0371f3bb47fcddd1580ca0c3711e61d3fc330acda66c29cdc0b6348e4fdf64da15cf047a976f2dfc0f5d9d731ec96ec69f172ad83c9c53e2e44989d405bb9ed1dcfad1d9e12de5de8b4debc12fd97b68a4435e498f30a00731eb76fafd32a201f5ac82c32fe6df338e0b63beaf77b0b1687deb642861f6c877e1a2b1bf011d988969b66d9adcb2b037b75f29c67f7014a59fcf9ac67acf57f55f38f72dc06c7b3e95339e23e692bedc732d540c82c49fa78708f3756a0e8899f28f467a27a7509399a54050a6a37e85c6543f3cddd60a93d3068a23bd3da30eda8f0af644fbc8b41102c4dd734edca0d9060b7cd848905a3d46cd8d13f7e56dbf5f397b81e9d294f77bdd6733d31f8d220f2a5a4ff9a4ece336cd78546019b83eadc7e6b3b911518b963f9ee11333c5cb318f36cd6e9ca1464bab553737aa46d8dca477e80e4be2704a06d0a072bdafccb2897c251ba74c7a4eec4276feb9afe66d984af9146901c710a0f7961954da1c707a73cc219bc5d83e4ba5de4b0121839a0dc0aa839b3d52049b2862e79132f04b7b5a2fbed4c3b0fbc02de09b2d419f11084019b5aadc7bc235a7c5d00103cdae602af3c6ce1c43e8759ac7f24e2ac831bddc21a2ff8b428f0c30c173440ec3349665e388231f614b1811c2f5ed5b112760dfe0df0182adc8c3819fe59e9a6686a77c4b01fd91ac0b2b5698e6414cfa36278175b594d22202f493899809ad3a4f6ffcfd3cd1578ca467c7453a60f1b275d3359d2aa988157b6af88e07ebc20ce93c1ca8427ce9a98adc6d1caf5615b08082479fdc2913dbb47b02ee55677aff135e7ed6c1be27acb504be9aa4a0898ef79c70c9c21e19403596e9204756c54fa9dfb6accd109d0b94b60c2164d90a0faabf5ad8a6366aca53d6bad2da5a5fbef7b9d62e7023b2672b40387c45ccdabbc55036f9009bce948adcee12bf277b2c6041e2bc825aee3bc4526548cd01ed79c7ac92ccf4bb7a9f06185b7afa80598d87e0358cd30a7c76a7b76e2689eb25b075f497837b118cd5cfe5f5c3732da5bb3aeedf50f485a052488f3e51f6dbfdd25db367e9c73f92c44b2f11e856c2b5794e43a945145c1cda15785fa21231fb3d80c997a44ecf6afcccf50d6ac4c02646f2b1b10ba7bd7c8fa09e27363216c65216df811871f78eec6e6750bbf94f301cbbfd5a8f2f37675aa8418ff9d3c227d9398fe068a855b6a38a1d3891ba31c399b852eb6a6eae024f0eaeea493900957317909370bd1f9b334b3397205429a43b9ee18dc874487cb676a80df27d20333c636ea2e57a5293fd6dfbe1aa3af4998d44427651a04d151d81cc52eccb6f0ee8c5ab3bf6258422fedbbce97f9ca71d5df43b78b368ba94b8eaacf7a67c1b04f49b478bb827105d8112cf1a56b7bbdc712bd02356573ec28796fcc691f1b4ccb6c47b0795fad1006387ef540e52faa8ac3287a62db7e3827b3ae5f70436808be6372b654b45a09eace74539d3e621f530d3e5ac1fc76d31b615deb7025720d14ea6d192900d2a6b4553213d0dd5cc7d4cf9932a821603a49a18c4ff36fd454966433c72102401596a4f3ccb270381fc7648358c1c3900e25a0a516273f1abe3386ceeef1613f7c47dba063cf235fc0c7eaf3439d5eda7c82510b85046766ada25bee5806af2882431317896625af720479ae24563a4a2ff49022b96854bc383902ab50b3870b98e4bb36aed9a4391beb7c87c570807c38fb7b4e7dd4d58a7b6c81d4e131fead285e78ea47fd201dbdafcae7276fbdcda7888c24a4c60229277a2c262c924f126d34c64850f86b96ce12cf7a7378aefe90cc5b6ed37211040737059c5549be9318289949560f185900e12c76cb73855c1174563556cc3be0cd16a246b6828305443019c0ba22a2ffcdc0c3d85218616ad7cb3d5927334e8d39eda00617cf2c2a9c7efca29ac56f9b2bf98a9ec82876c41db6ee2aededd58ffbe7d3fe0d9daeba4fcaf5018bc273318f1d5ea1df996d49087641be23d6e09fc4e235e314caacc7b94368d60744996a68795221875b0a15ae3cc73c0726a2481d15ad67b4aeeb95a458a663abd50b70e5d3ce2162079e772099cf99eb4279bd804d5485bec1527a3f7dbeb4c073277fde354aaab1788686688fb8f9c97fcf334173e6a5057f04e6fd8e684a3f58655bb20bce439b36a7207435419b672daf5c755a7d8329e5d0e12e7e8819f6cd4c92e9d68acd279bc557dea6d358b3cdd0d8985a9595225df49b24329157eab247f9a7efd3a48c2c067f2dbdafe639d93dffcb3a087451b1c57161104a229a0c52e917fd062a78e33d5452402d4c12de3d68499f6c30e38c8280bedc2b31c81c5ff4d2f9263ecffa1481d5a128d071b1347046697a77cae06c13fd6da8659ef123b864947b689b363ad7016acfa8d96718fe00dcad2942899b1fac432093ee875eb21f71a8f639783ee9bb550dcc9aeaefb9b46c92ad22d3471abefc3a33691ea23a857b4098131d9bcefc907943b937e9d5122a13a2b1509118c98ba7426fef1f3147cb220b0b3fb934eb9da121a29404ad84b4b72ef7124230052f7bf0651b56bb47f1d23303ba5209ec99cd05fedc57b7ff6bbb7c0f2638fdb657912b45d3eb8e885331bcf4e01bac23b057462deceb6f63c405f036cb4e73a3e3f5f0de95600c129ab48bfcf0b0564dcc8f2da4ab106a201d996b742786558ceb99735b2b274e59660637b478d8a3f51511820df40d2d1b754fdcc152ff58b1ef61e2f324b102311a31dc803c5b43ef3ab6cf98dd8e5d96149a8327b760c755fe0d6a7e38f244f78b7b7551c95da8d68a7e1e81c4074a99e37fa693e8327eb4a056898f0e1c7ed7130e7246801c4f8100ba5e0a59be771cbb5e5562cfd55502557670885292524e744baafdbb763f5590b7be6912372c56e522d6a9e6c56d8d91f15cf6be04ea7152e61926959962d9c4c95742ded8d7089c8790f4562491779b4e8d89264c35ed4a166ce485aca18d6f515a9b15072d026f08373c09d7193a8bfa869e93389d7b2217a136ddebb2a8f57f6d2e7df1d556801dee61ddd1ded4c5e675fae14dfa40aadab0f7498f64fc50445d412c03cf98ef0b3895b9140cd6966cfc3445edb51cef29cc08c7c22d0661c59bbc31147c3c499e838e45bdcc64295d50dbfbc6a65aac4f0376650bb317734a1038bba13bd453cc6ef1d44a1c8501cc362ae1b8ea43c0124f90a86a081fdd80c83ab38e62e8418ad962b29419bd2966495f3e02130b9813e99b9da6e6bfd20e4fe7a150933efbad9e3498cb22827624a635b7c4469dffdb5c4ee8c080b28b5e9c37e667b957140008ec6da0485f14082275e5195e524934aaae80151121f0ef07c5630b5e5000fcc7cd85ae662d34a1b139aa565ee8346a0366f53eb2a6dbadad1aa330cd5222411ec3791de0d224f5e488753949c738c31198c3d7ce6891cbe54252a93d65fc16d9d7204735bc8d8b9a312cba9c22caac0018b16537cd2dec9ae91fb5518922ef6097473b76010c6294311c3d3706f0c58b843eabfb88e357020bec55e6b3e407c32afcba989ea0f6a54b6ffa0aa1ea9b70e7da783f219683ca3a380ec46f939cd3929ff12be771c083ecfbc5cf7d2a2e1b05be06734473f90f26ed8ba837962b4ba0fc64fce4bd3c7c88e9f6482eaa60ff678241a1bcf094b67a3d026e2a1da67f44715775310914ddaa54554ecc5596469908bd21591972028c245c3609a09ea76a83d527769871776a57c559d2ababea8333b503f6e4e30ac370c6ad341b0b13fa3c52cc54a838945b2f8db220484b77a45cebf7b5ab7c38c3515c31e65ec9b777cd555f69b72f550b9e8896877c590b6f83d1c4950de816af4859bcfb3af1d809efca9fb3c7b48b2e21bd207"}) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0xc0105500, &(0x7f00000001c0)=@urb_type_control={0xa1, {}, 0x696, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000080)={0x4, "2a10bc2ca4a1fb89656a240a165b0dd22f5902b39f42cfa9cbac497c586108ec", 0x0, 0x1}) 983.068295ms ago: executing program 2 (id=925): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x14, 0x3, 'nq\x00', 0x28, 0x5, 0x72}, 0x2c) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x40000006}) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000099, 0x0, 0x5}]}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffe, 0x10000000, 0x10002, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x1, 0x400, 0x80, 0x88, 0x0, 0xc, 0x8d], 0x200000, 0x240046}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r9 = socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') statx(r10, 0x0, 0x1000, 0x800, 0x0) (async) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 929.319724ms ago: executing program 2 (id=926): syz_open_dev$ttys(0xc, 0x2, 0x1) 850.725229ms ago: executing program 2 (id=927): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x80006, 0x1, 0x5, 0xffffffff, 0xe661, 0x2, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x2, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x9, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x3, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x1ff, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x8cd, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x80006, 0x1, 0x5, 0xffffffff, 0xe661, 0x2, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x2, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x9, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x3, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x1ff, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x8cd, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x11}}) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000440)="18349ff0707314657eaa8c2904dd1d1d86dd", 0x30, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xff}, 0x14) (async) sendto$packet(r4, &(0x7f0000000440)="18349ff0707314657eaa8c2904dd1d1d86dd", 0x30, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xff}, 0x14) 707.504615ms ago: executing program 1 (id=928): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00222200000096930306e53f07020000002a900683749e821c0b8b9236590b"], 0x0}, 0x0) 606.427967ms ago: executing program 3 (id=929): setresgid(0x0, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0xfff0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 489.589171ms ago: executing program 3 (id=930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x82, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09e3650f01efeff8000f0d35", 0x29}], 0x1, 0x2, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0xffff1000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 235.203436ms ago: executing program 3 (id=931): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20048081}, 0x800) 172.775036ms ago: executing program 3 (id=932): setresgid(0x0, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x20002, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 0s ago: executing program 3 (id=933): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x7, 0x1000}, &(0x7f0000000100)=0x18) r1 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x5ec, &(0x7f0000000740)={[{0x5e5, 0x4e00, "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"}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 73.582234][ T5826] cgroup: Unknown subsys name 'net' [ 73.697020][ T5826] cgroup: Unknown subsys name 'cpuset' [ 73.706346][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.270182][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.828395][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.838027][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.845557][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.854912][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.857860][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.870229][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.871427][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.881651][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.889727][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.893540][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.904024][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.906628][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.918390][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.925389][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.931154][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.933444][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.948442][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.948527][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.958733][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.966171][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.464201][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 79.489328][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 79.624581][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 79.738355][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.747274][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.755533][ T5840] bridge_slave_0: entered allmulticast mode [ 79.762989][ T5840] bridge_slave_0: entered promiscuous mode [ 79.792216][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.799651][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.806949][ T5840] bridge_slave_1: entered allmulticast mode [ 79.814224][ T5840] bridge_slave_1: entered promiscuous mode [ 79.822200][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 79.839519][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.846879][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.854148][ T5837] bridge_slave_0: entered allmulticast mode [ 79.861419][ T5837] bridge_slave_0: entered promiscuous mode [ 79.869855][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.877586][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.885173][ T5837] bridge_slave_1: entered allmulticast mode [ 79.892383][ T5837] bridge_slave_1: entered promiscuous mode [ 79.975390][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.007766][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.020104][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.031905][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.056767][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.064038][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.071179][ T5838] bridge_slave_0: entered allmulticast mode [ 80.078787][ T5838] bridge_slave_0: entered promiscuous mode [ 80.114670][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.121941][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.129617][ T5838] bridge_slave_1: entered allmulticast mode [ 80.137150][ T5838] bridge_slave_1: entered promiscuous mode [ 80.155336][ T5840] team0: Port device team_slave_0 added [ 80.178750][ T5837] team0: Port device team_slave_0 added [ 80.186720][ T5840] team0: Port device team_slave_1 added [ 80.213949][ T5837] team0: Port device team_slave_1 added [ 80.242764][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.271467][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.278791][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.286011][ T5839] bridge_slave_0: entered allmulticast mode [ 80.293536][ T5839] bridge_slave_0: entered promiscuous mode [ 80.302833][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.332526][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.339655][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.365859][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.377819][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.385480][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.392867][ T5839] bridge_slave_1: entered allmulticast mode [ 80.400435][ T5839] bridge_slave_1: entered promiscuous mode [ 80.417762][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.424814][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.450772][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.462384][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.469553][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.495681][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.523952][ T5838] team0: Port device team_slave_0 added [ 80.530308][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.537546][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.563547][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.594848][ T5838] team0: Port device team_slave_1 added [ 80.611967][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.627412][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.690811][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.698134][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.724607][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.752195][ T5837] hsr_slave_0: entered promiscuous mode [ 80.758724][ T5837] hsr_slave_1: entered promiscuous mode [ 80.776094][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.783153][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.809375][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.837744][ T5840] hsr_slave_0: entered promiscuous mode [ 80.844451][ T5840] hsr_slave_1: entered promiscuous mode [ 80.850612][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 80.856679][ T5840] Cannot create hsr debugfs directory [ 80.864580][ T5839] team0: Port device team_slave_0 added [ 80.899693][ T5839] team0: Port device team_slave_1 added [ 80.959623][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.966932][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.992892][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.013898][ T51] Bluetooth: hci1: command tx timeout [ 81.013905][ T5854] Bluetooth: hci2: command tx timeout [ 81.014192][ T5854] Bluetooth: hci3: command tx timeout [ 81.020334][ T5848] Bluetooth: hci0: command tx timeout [ 81.049422][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.056546][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.082678][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.105159][ T5838] hsr_slave_0: entered promiscuous mode [ 81.111583][ T5838] hsr_slave_1: entered promiscuous mode [ 81.118047][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 81.123819][ T5838] Cannot create hsr debugfs directory [ 81.257749][ T5839] hsr_slave_0: entered promiscuous mode [ 81.264362][ T5839] hsr_slave_1: entered promiscuous mode [ 81.270416][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 81.276569][ T5839] Cannot create hsr debugfs directory [ 81.579377][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.602451][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.614118][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.634592][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.704855][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.721447][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.736598][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.747282][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.835515][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.846872][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.858831][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.870183][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.966955][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.977823][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.988626][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.999567][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.012052][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.079233][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.108672][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.116122][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.144363][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.151484][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.184140][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.232203][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.263821][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.270983][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.281876][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.289030][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.331885][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.371212][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.414581][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.432797][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.451015][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.458228][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.488702][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.495910][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.516143][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.523382][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.539547][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.546774][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.780889][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.848801][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.975532][ T5837] veth0_vlan: entered promiscuous mode [ 83.002549][ T5840] veth0_vlan: entered promiscuous mode [ 83.014275][ T5837] veth1_vlan: entered promiscuous mode [ 83.029247][ T5840] veth1_vlan: entered promiscuous mode [ 83.104505][ T5848] Bluetooth: hci3: command tx timeout [ 83.104541][ T5853] Bluetooth: hci1: command tx timeout [ 83.109990][ T5848] Bluetooth: hci2: command tx timeout [ 83.120393][ T5854] Bluetooth: hci0: command tx timeout [ 83.146482][ T5837] veth0_macvtap: entered promiscuous mode [ 83.170466][ T5837] veth1_macvtap: entered promiscuous mode [ 83.201435][ T5840] veth0_macvtap: entered promiscuous mode [ 83.222160][ T5840] veth1_macvtap: entered promiscuous mode [ 83.234802][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.248314][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.262848][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.273387][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.304983][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.315071][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.337040][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.346042][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.359803][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.372549][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.412419][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.422416][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.452835][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.462465][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.546293][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.555154][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.590544][ T5838] veth0_vlan: entered promiscuous mode [ 83.598051][ T5839] veth0_vlan: entered promiscuous mode [ 83.634209][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.647912][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.656073][ T5838] veth1_vlan: entered promiscuous mode [ 83.679722][ T5839] veth1_vlan: entered promiscuous mode [ 83.714777][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.728584][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.774868][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.801502][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.816399][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.855610][ T5838] veth0_macvtap: entered promiscuous mode [ 83.889592][ T5839] veth0_macvtap: entered promiscuous mode [ 83.919982][ T5838] veth1_macvtap: entered promiscuous mode [ 83.938870][ T5839] veth1_macvtap: entered promiscuous mode [ 83.951384][ T5933] netlink: 'syz.1.2': attribute type 33 has an invalid length. [ 83.960978][ T5933] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.007423][ T5933] input: syz1 as /devices/virtual/input/input5 [ 84.021180][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.038512][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.067431][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.080055][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.121303][ T1177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.131247][ T1177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.168329][ T5936] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 84.189889][ T1177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.208538][ T1177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.247386][ T1177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.257879][ T1177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.289283][ T1177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.301355][ T1177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.410526][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.432597][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.497733][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.508012][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.565754][ T5944] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.597996][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.606456][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.619748][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.631263][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.694912][ T5944] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.895846][ T5950] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.920365][ T5944] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.952212][ T5954] comedi comedi3: pcl818: I/O port conflict (0x4004f27,16) [ 85.147663][ T5944] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.173266][ T5853] Bluetooth: hci1: command tx timeout [ 85.174351][ T5848] Bluetooth: hci3: command tx timeout [ 85.178751][ T5854] Bluetooth: hci0: command tx timeout [ 85.184225][ T51] Bluetooth: hci2: command tx timeout [ 85.253933][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.255806][ T5845] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.426308][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 85.433261][ T5845] usb 1-1: Using ep0 maxpacket: 16 [ 85.436356][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.448770][ T5845] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 33, changing to 7 [ 85.468639][ T5845] usb 1-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 85.474473][ T9] usb 4-1: config 0 descriptor?? [ 85.489559][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.499751][ T5845] usb 1-1: Product: 伂ꏹ䷝仒㨹꥗릭벇甃ᭅᰓࡓဋ퉾ꗠ␶➍㯆간⥪ह 㯏院藉⼴媰兆幟﹃忾﹘섘鍁蓼뻫፡뾔ꭽ壳람沿賱⡪ᝉ犴쮪抮鉢琍 [ 85.522119][ T5845] usb 1-1: Manufacturer: చ [ 85.528038][ T9] cp210x 4-1:0.0: cp210x converter detected [ 85.529260][ T5845] usb 1-1: SerialNumber: 娴␩矀䍂᭔閰鯃⦄䇉蝔溺뢩캮ି鎱䃈涼혿ၺ葺〒ϳ儡搄漫춚ﴲⒺ휞䏜ؽ묌噮掐痢ꌭ佋燤믦헌춆衸㤮禝줜龗쌌疵빤캂갬픉聩泅 [ 85.555160][ T47] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 85.589826][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.611296][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.632913][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.655727][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.693220][ T47] usb 3-1: device descriptor read/64, error -71 [ 85.777991][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.787673][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.831844][ T5845] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 85.892199][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 85.934688][ T47] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 85.947401][ T5845] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 85.974181][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 85.989508][ T5845] usb 1-1: USB disconnect, device number 2 [ 86.042769][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.083549][ T47] usb 3-1: device descriptor read/64, error -71 [ 86.124564][ T9] usb 4-1: USB disconnect, device number 2 [ 86.186038][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 86.208439][ T47] usb usb3-port1: attempt power cycle [ 86.221076][ T9] cp210x 4-1:0.0: device disconnected [ 86.573529][ T47] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 86.623705][ T47] usb 3-1: device descriptor read/8, error -71 [ 86.875484][ T47] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 86.927402][ T47] usb 3-1: device descriptor read/8, error -71 [ 87.043485][ T47] usb usb3-port1: unable to enumerate USB device [ 87.059037][ T5996] ======================================================= [ 87.059037][ T5996] WARNING: The mand mount option has been deprecated and [ 87.059037][ T5996] and is ignored by this kernel. Remove the mand [ 87.059037][ T5996] option from the mount to silence this warning. [ 87.059037][ T5996] ======================================================= [ 87.253538][ T5848] Bluetooth: hci0: command tx timeout [ 87.254924][ T51] Bluetooth: hci1: command tx timeout [ 87.265276][ T5848] Bluetooth: hci3: command tx timeout [ 87.265303][ T5848] Bluetooth: hci2: command tx timeout [ 88.064662][ T6024] netlink: 5752 bytes leftover after parsing attributes in process `syz.1.34'. [ 89.847768][ T29] audit: type=1326 audit(1775902639.844:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.1.58" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf7239c819 code=0x0 [ 91.022936][ T6104] syz.0.67 uses obsolete (PF_INET,SOCK_PACKET) [ 91.024267][ T29] audit: type=1326 audit(1775902641.024:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 91.079391][ T29] audit: type=1326 audit(1775902641.024:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 91.139222][ T29] audit: type=1326 audit(1775902641.054:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 91.204705][ T29] audit: type=1326 audit(1775902641.054:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 91.297756][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.71'. [ 91.472715][ T6120] sg_read: process 32 (syz.2.75) changed security contexts after opening file descriptor, this is not allowed. [ 91.748282][ T10] cfg80211: failed to load regulatory.db [ 92.876788][ T6170] bond0: entered promiscuous mode [ 92.895677][ T6170] bond_slave_0: entered promiscuous mode [ 92.913268][ T6170] bond_slave_1: entered promiscuous mode [ 92.926905][ T6170] bond0: entered allmulticast mode [ 92.945488][ T6170] bond_slave_0: entered allmulticast mode [ 92.953207][ T6170] bond_slave_1: entered allmulticast mode [ 93.427949][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 95.095205][ T6275] random: crng reseeded on system resumption [ 95.212714][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 95.590901][ T6298] netlink: 7 bytes leftover after parsing attributes in process `syz.2.161'. [ 95.699083][ T6304] process 'syz.1.163' launched './file0' with NULL argv: empty string added [ 96.526062][ T6336] pim6reg: entered allmulticast mode [ 96.563284][ T6335] pim6reg: left allmulticast mode [ 97.505034][ T6366] netlink: 'syz.3.191': attribute type 11 has an invalid length. [ 98.876436][ T29] audit: type=1326 audit(1775902648.874:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c699c819 code=0x7ffc0000 [ 98.899637][ T29] audit: type=1326 audit(1775902648.874:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c699c819 code=0x7ffc0000 [ 98.922622][ T29] audit: type=1326 audit(1775902648.874:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb0c699c819 code=0x7ffc0000 [ 98.953692][ T29] audit: type=1326 audit(1775902648.874:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c699c819 code=0x7ffc0000 [ 98.976947][ T29] audit: type=1326 audit(1775902648.874:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fb0c699c819 code=0x7ffc0000 [ 99.001009][ T29] audit: type=1326 audit(1775902648.874:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c699c819 code=0x7ffc0000 [ 99.025245][ T29] audit: type=1326 audit(1775902648.874:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c699c819 code=0x7ffc0000 [ 99.209940][ T6410] netlink: 104 bytes leftover after parsing attributes in process `syz.3.210'. [ 99.387807][ T5942] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.488482][ T5942] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.533299][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.306180][ T10] usb 4-1: device descriptor read/64, error -71 [ 101.575391][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.736443][ T10] usb 4-1: device descriptor read/64, error -71 [ 101.860820][ T10] usb usb4-port1: attempt power cycle [ 102.070709][ T6462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.234'. [ 102.114465][ T6464] netlink: 228 bytes leftover after parsing attributes in process `syz.2.235'. [ 102.223474][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.262711][ T10] usb 4-1: device descriptor read/8, error -71 [ 102.957968][ T29] audit: type=1326 audit(1775902652.954:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c699c819 code=0x7ffc0000 [ 103.044470][ T29] audit: type=1326 audit(1775902652.954:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c699c819 code=0x7ffc0000 [ 103.160434][ T29] audit: type=1326 audit(1775902653.004:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c699c819 code=0x7ffc0000 [ 103.649552][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 103.877708][ T6536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.269'. [ 104.698689][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.282'. [ 104.714847][ T6563] netlink: 'syz.2.282': attribute type 2 has an invalid length. [ 104.736221][ T6563] netlink: 'syz.2.282': attribute type 2 has an invalid length. [ 104.757941][ T6563] netlink: 'syz.2.282': attribute type 1 has an invalid length. [ 104.784333][ T6563] netlink: 176 bytes leftover after parsing attributes in process `syz.2.282'. [ 105.154489][ T6582] syzkaller1: entered allmulticast mode [ 107.233238][ T6621] netlink: 280 bytes leftover after parsing attributes in process `syz.0.306'. [ 107.930445][ T6623] Zero length message leads to an empty skb [ 108.011601][ T6623] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.108813][ T6623] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.193286][ T6623] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.401008][ T6623] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.499616][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.536184][ T60] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.574763][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.583425][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.645535][ T6646] syzkaller1: entered allmulticast mode [ 108.907523][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 108.927264][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 109.998245][ T6664] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.018373][ T6664] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.062190][ T6664] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.087565][ T6664] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.095353][ T6664] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.106313][ T6664] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.118262][ T6664] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.124467][ T6664] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.134198][ T6664] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.152399][ T6664] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.163293][ T6664] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.181123][ T6664] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.443185][ T5963] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.593516][ T5963] usb 3-1: device descriptor read/64, error -71 [ 110.603825][ T6693] tipc: Failed to obtain node identity [ 110.616493][ T6693] tipc: Enabling of bearer rejected, failed to enable media [ 110.863121][ T5963] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.014645][ T5963] usb 3-1: device descriptor read/64, error -71 [ 111.143408][ T5963] usb usb3-port1: attempt power cycle [ 111.253165][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.503192][ T5963] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 111.534331][ T5963] usb 3-1: device descriptor read/8, error -71 [ 111.793204][ T5963] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 111.816838][ T5963] usb 3-1: device descriptor read/8, error -71 [ 111.934285][ T5963] usb usb3-port1: unable to enumerate USB device [ 112.133191][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.139646][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.216291][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.441107][ T6765] syzkaller1: entered promiscuous mode [ 112.463153][ T6765] syzkaller1: entered allmulticast mode [ 113.334397][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.753464][ T5963] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.895164][ T5963] usb 4-1: device descriptor read/64, error -71 [ 114.153319][ T5963] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 114.215982][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.222118][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.293342][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.317103][ T5963] usb 4-1: device descriptor read/64, error -71 [ 114.437885][ T5963] usb usb4-port1: attempt power cycle [ 114.793193][ T5963] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 114.846586][ T5963] usb 4-1: device descriptor read/8, error -71 [ 115.020615][ T6858] sd 0:0:1:0: device reset [ 115.443966][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.723912][ T5963] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 115.773815][ T5963] usb 4-1: device descriptor read/8, error -71 [ 115.893585][ T5963] usb usb4-port1: unable to enumerate USB device [ 115.975687][ T6878] netlink: 'syz.0.418': attribute type 29 has an invalid length. [ 115.986759][ T6878] netlink: 'syz.0.418': attribute type 29 has an invalid length. [ 115.996200][ T6878] netlink: 500 bytes leftover after parsing attributes in process `syz.0.418'. [ 116.293223][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.299379][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.373153][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.513963][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 116.513980][ T29] audit: type=1326 audit(1775902666.514:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.2.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 116.635988][ T29] audit: type=1326 audit(1775902666.514:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.2.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 116.734770][ T29] audit: type=1326 audit(1775902666.574:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.2.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 116.783948][ T29] audit: type=1326 audit(1775902666.574:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.2.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 116.806835][ T29] audit: type=1326 audit(1775902666.574:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.2.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 116.832374][ T29] audit: type=1326 audit(1775902666.574:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.2.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 116.900039][ T29] audit: type=1326 audit(1775902666.574:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.2.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 116.922912][ T29] audit: type=1326 audit(1775902666.574:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.2.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 117.051836][ T29] audit: type=1326 audit(1775902666.574:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.2.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 117.114791][ T29] audit: type=1326 audit(1775902666.574:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.2.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 118.215546][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 118.586800][ T6973] mmap: syz.3.461 (6973) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.694565][ T6998] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 121.898992][ T7063] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 121.988720][ T7068] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 4, id = 0 [ 122.034253][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 122.099274][ T7072] ieee802154 phy0 wpan0: encryption failed: -22 [ 122.854142][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 122.854161][ T29] audit: type=1326 audit(1775948247.846:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 122.928592][ T29] audit: type=1326 audit(1775948247.856:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 122.967838][ T29] audit: type=1326 audit(1775948247.896:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 122.990349][ T29] audit: type=1326 audit(1775948247.896:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 123.039086][ T29] audit: type=1326 audit(1775948247.896:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 123.098135][ T29] audit: type=1326 audit(1775948247.896:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 123.150460][ T29] audit: type=1326 audit(1775948247.896:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 123.209902][ T29] audit: type=1326 audit(1775948247.906:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 123.249995][ T29] audit: type=1326 audit(1775948247.906:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 123.328090][ T29] audit: type=1326 audit(1775948247.906:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7f719c99c819 code=0x7ffc0000 [ 123.898199][ T7146] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.269040][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.548'. [ 124.474082][ T5942] hid-generic 0000:0002:0006.0002: unknown main item tag 0x0 [ 124.502440][ T5942] hid-generic 0000:0002:0006.0002: unknown main item tag 0x0 [ 124.518745][ T5942] hid-generic 0000:0002:0006.0002: unknown main item tag 0x0 [ 124.527727][ T7178] netlink: 'syz.0.555': attribute type 3 has an invalid length. [ 124.541769][ T5942] hid-generic 0000:0002:0006.0002: unknown main item tag 0x0 [ 124.558818][ T5942] hid-generic 0000:0002:0006.0002: unknown main item tag 0x0 [ 124.566599][ T5942] hid-generic 0000:0002:0006.0002: unknown main item tag 0x0 [ 124.575180][ T5942] hid-generic 0000:0002:0006.0002: unknown main item tag 0x0 [ 124.582949][ T5942] hid-generic 0000:0002:0006.0002: unknown main item tag 0x0 [ 124.590826][ T5942] hid-generic 0000:0002:0006.0002: unknown main item tag 0x0 [ 124.599060][ T5942] hid-generic 0000:0002:0006.0002: unknown main item tag 0x0 [ 124.621764][ T5942] hid-generic 0000:0002:0006.0002: hidraw0: HID v0.02 Device [syz1] on syz0 [ 124.770028][ T7190] netlink: 9 bytes leftover after parsing attributes in process `syz.0.558'. [ 124.805979][ T7190] netlink: 9 bytes leftover after parsing attributes in process `syz.0.558'. [ 124.822723][ T7182] fido_id[7182]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 125.182195][ T7211] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 126.307752][ T5963] kernel read not supported for file /null (pid: 5963 comm: kworker/1:5) [ 126.978356][ T7268] dummy0: entered allmulticast mode [ 126.984846][ T7268] dummy0: left allmulticast mode [ 127.052611][ T7271] tipc: Can't bind to reserved service type 0 [ 127.696901][ T7185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.890523][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 127.890539][ T29] audit: type=1326 audit(1775948252.886:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.3.612" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0c699c819 code=0x0 [ 128.038454][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'. [ 128.600560][ T7349] netlink: 'syz.1.628': attribute type 10 has an invalid length. [ 129.261992][ T7373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.639'. [ 129.500028][ T29] audit: type=1326 audit(1775948254.496:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 129.526114][ T29] audit: type=1326 audit(1775948254.526:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 129.550560][ T29] audit: type=1326 audit(1775948254.526:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 129.575166][ T29] audit: type=1326 audit(1775948254.526:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 129.597554][ T29] audit: type=1326 audit(1775948254.526:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 129.664903][ T29] audit: type=1326 audit(1775948254.526:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 129.703847][ T29] audit: type=1326 audit(1775948254.526:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 129.756318][ T29] audit: type=1326 audit(1775948254.546:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 129.791648][ T29] audit: type=1326 audit(1775948254.546:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 129.997212][ T7400] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 130.841382][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 131.514710][ T7480] netlink: 532 bytes leftover after parsing attributes in process `syz.0.689'. [ 132.074337][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 132.250884][ T7517] netlink: 44 bytes leftover after parsing attributes in process `syz.0.706'. [ 132.421752][ T7526] support for the xor transformation has been removed. [ 132.450205][ T7528] kernel read not supported for file /baadv_slave_1 (pid: 7528 comm: syz.0.710) [ 132.494941][ T7530] set match dimension is over the limit! [ 132.533782][ T5890] kernel read not supported for file /baadv_slave_1 (pid: 5890 comm: kworker/0:4) [ 132.700860][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.710519][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.991207][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 133.288330][ T7557] tmpfs: Bad value for 'mpol' [ 136.510234][ T7647] netlink: 68 bytes leftover after parsing attributes in process `syz.3.762'. [ 136.749699][ T7650] netlink: 'syz.1.763': attribute type 4 has an invalid length. [ 136.812189][ T7651] netlink: 'syz.1.763': attribute type 4 has an invalid length. [ 137.540454][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.775'. [ 137.954918][ T7695] kernel read not supported for file /baadv_slave_1 (pid: 7695 comm: syz.3.784) [ 137.965183][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 137.965196][ T29] audit: type=1800 audit(1775948262.966:69): pid=7695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.784" name=6261016164765F736C6176655F31 dev="mqueue" ino=14426 res=0 errno=0 [ 138.010475][ T7697] pimreg: entered allmulticast mode [ 138.019081][ T7696] pimreg: left allmulticast mode [ 138.046885][ T5910] kernel read not supported for file /baadv_slave_1 (pid: 5910 comm: kworker/0:6) [ 139.417403][ T7748] netlink: 592 bytes leftover after parsing attributes in process `syz.2.806'. [ 140.406636][ T7788] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.841639][ T29] audit: type=1326 audit(1775948265.836:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 140.915089][ T29] audit: type=1326 audit(1775948265.836:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 140.998598][ T29] audit: type=1326 audit(1775948265.866:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 141.054190][ T29] audit: type=1326 audit(1775948265.866:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 141.110751][ T29] audit: type=1326 audit(1775948265.866:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 141.186665][ T29] audit: type=1326 audit(1775948265.866:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 141.253657][ T29] audit: type=1326 audit(1775948265.866:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 141.311525][ T29] audit: type=1326 audit(1775948265.866:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 141.393522][ T29] audit: type=1326 audit(1775948265.866:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f0bba79c819 code=0x7ffc0000 [ 141.502963][ T7828] loop7: detected capacity change from 0 to 16384 [ 141.626455][ T7828] loop7: detected capacity change from 16384 to 0 [ 141.635589][ C0] I/O error, dev loop7, sector 15792 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.047465][ T7851] tipc: Enabling of bearer rejected, failed to enable media [ 142.173143][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 144.618439][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'. [ 144.728856][ T7908] netlink: 388 bytes leftover after parsing attributes in process `syz.3.876'. [ 145.457273][ T7870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.758305][ T7976] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.987459][ T7986] overlayfs: failed to resolve './file1': -2 [ 147.406379][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 147.643202][ T5910] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 147.806566][ T5910] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.819895][ T5910] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 147.829469][ T5910] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.844309][ T5910] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.853441][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 147.861616][ T5910] usb 2-1: Product: syz [ 147.865914][ T5910] usb 2-1: SerialNumber: syz [ 147.880973][ T5910] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 147.888569][ T5910] cdc_ncm 2-1:1.0: bind() failure [ 148.043177][ T5844] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 148.043177][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 148.095330][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.105079][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.165762][ T5910] usb 2-1: USB disconnect, device number 2 [ 148.203100][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 148.217922][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 148.226116][ T5844] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 148.226833][ T9] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 148.246112][ T5844] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 148.250744][ T9] usb 3-1: config 0 has no interface number 0 [ 148.265020][ T9] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 148.273169][ T5844] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.282272][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 148.296999][ T5844] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 148.302930][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.319588][ T9] usb 3-1: Product: syz [ 148.323989][ T9] usb 3-1: Manufacturer: syz [ 148.328629][ T9] usb 3-1: SerialNumber: syz [ 148.337147][ T5844] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 148.354470][ T9] usb 3-1: config 0 descriptor?? [ 148.355396][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.368859][ T8008] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 148.383103][ T5844] usb 1-1: Product: syz [ 148.388844][ T5844] usb 1-1: Manufacturer: syz [ 148.403096][ T5844] usb 1-1: SerialNumber: syz [ 148.426801][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 148.463291][ T5844] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input8 [ 148.590131][ T9] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 148.606513][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 148.615684][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 148.624474][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 148.633758][ T9] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 148.636738][ T5844] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 148.651881][ T5844] (id 0x00) [ 148.663980][ T9] usb 3-1: USB disconnect, device number 10 [ 148.686370][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 148.728515][ T9] keyspan 3-1:0.133: device disconnected [ 148.753210][ T5844] rc_core: IR keymap rc-imon-pad not found [ 148.767186][ T5844] Registered IR keymap rc-empty [ 148.782688][ T5844] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 148.806691][ T5844] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 148.852168][ T5844] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 148.892075][ T5844] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input9 [ 148.909203][ T8013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.941968][ T5844] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:3> initialized [ 149.201752][ T5844] usb 1-1: USB disconnect, device number 3 [ 149.393134][ T9] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 149.413567][ T5854] Bluetooth: hci4: command 0x1003 tx timeout [ 149.418769][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 149.581885][ T9] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 149.607694][ T9] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 149.624874][ T5910] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 149.639190][ T9] usb 2-1: config 0 has no interface number 0 [ 149.659218][ T9] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 149.675053][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 149.689746][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.724585][ T9] usb 2-1: config 0 descriptor?? [ 149.746951][ T8024] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 149.804826][ T5910] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 149.813593][ T5910] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 149.826432][ T5910] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 149.836723][ T5910] usb 3-1: config 150 has no interface number 0 [ 149.843299][ T5910] usb 3-1: config 150 interface 204 has no altsetting 0 [ 149.853373][ T5910] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 149.862733][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.871466][ T5910] usb 3-1: Product: syz [ 149.883179][ T5910] usb 3-1: Manufacturer: syz [ 149.893319][ T5910] usb 3-1: SerialNumber: syz [ 149.973757][ T5963] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 150.133157][ T5963] usb 1-1: Using ep0 maxpacket: 32 [ 150.141448][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.152777][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.164967][ T5963] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 150.175929][ T5844] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 150.184009][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.199255][ T5963] usb 1-1: config 0 descriptor?? [ 150.213451][ T5910] usb 3-1: USB disconnect, device number 11 [ 150.260540][ T5963] hub 1-1:0.0: USB hub found [ 150.348233][ T5844] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 150.374703][ T5844] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 150.384882][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.392962][ T5844] usb 4-1: Product: syz [ 150.398420][ T5844] usb 4-1: Manufacturer: syz [ 150.403423][ T5844] usb 4-1: SerialNumber: syz [ 150.408413][ T9] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input10 [ 150.437206][ T5963] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 150.591392][ T9] usb 2-1: USB disconnect, device number 3 [ 150.597370][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 150.630884][ T5844] usb 4-1: selecting invalid altsetting 1 [ 150.733113][ T5910] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 150.831070][ T5844] LME2510(C): Firmware Status: 88 03 aa 5c 9c b3 [ 150.831191][ T5844] dvb_usb_lmedm04 4-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 150.874659][ T5963] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 150.903912][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 150.910885][ T5910] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 150.920177][ T5910] usb 3-1: config 1 has no interface number 0 [ 150.927280][ T5910] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 150.941803][ T5910] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 150.954355][ T5910] usb 3-1: config 1 interface 105 has no altsetting 0 [ 150.964102][ T5910] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 150.973440][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 150.981683][ T5910] usb 3-1: Product: syz [ 150.986416][ T5910] usb 3-1: Manufacturer: syz [ 150.991071][ T5910] usb 3-1: SerialNumber: syz [ 151.001401][ T8060] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 151.011214][ T8060] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 151.052978][ T8048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.065382][ T8048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.155016][ T8063] openvswitch: netlink: IP tunnel dst address not specified [ 151.193517][ T9] usb 1-1: USB disconnect, device number 4 [ 151.427135][ T8060] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 151.434654][ T8060] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 151.463136][ T5963] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 151.613594][ T5963] usb 2-1: Using ep0 maxpacket: 16 [ 151.626054][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.648399][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.663144][ T5963] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.677223][ T5963] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 151.686491][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.706911][ T5963] usb 2-1: config 0 descriptor?? [ 151.993135][ T5844] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 152.049042][ T5910] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 152.062269][ T5910] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 152.093591][ T5910] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e4:5d:bf:c3:ab:ee [ 152.113903][ T5910] usb 3-1: USB disconnect, device number 12 [ 152.140405][ T5910] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 152.154642][ T5844] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 152.163793][ T5844] usb 1-1: config 179 has no interface number 0 [ 152.171500][ T5963] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input11 [ 152.188124][ T5844] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 152.205852][ T5844] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 152.218141][ T5844] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 152.230680][ T5844] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 152.242472][ T5844] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 152.256240][ T5844] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 152.270423][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.297312][ T5963] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 152.338265][ T8069] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 152.348302][ T5910] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 152.365476][ T8069] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 152.380500][ T5910] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 152.398331][ T5910] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 152.700674][ T5844] IPVS: starting estimator thread 0... [ 152.823427][ T8074] IPVS: using max 30 ests per chain, 72000 per kthread [ 152.894908][ T5963] usb 2-1: USB disconnect, device number 4 [ 153.047577][ T5844] usb 4-1: USB disconnect, device number 11 [ 153.134317][ T5910] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 153.308335][ T5910] usb 3-1: config 0 has no interfaces? [ 153.315624][ T5910] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 153.328355][ T5910] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 153.336420][ T5963] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 153.345112][ T5910] usb 3-1: Manufacturer: syz [ 153.357655][ T5910] usb 3-1: config 0 descriptor?? [ 153.493355][ T5963] usb 2-1: Using ep0 maxpacket: 16 [ 153.517438][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.546660][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.557160][ T5963] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 153.571022][ T5963] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 153.580701][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.592140][ T9] usb 3-1: USB disconnect, device number 13 [ 153.614095][ T5963] usb 2-1: config 0 descriptor?? [ 153.754452][ T10] usb 1-1: USB disconnect, device number 5 [ 153.754452][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 153.754524][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 153.777474][ C1] ================================================================== [ 153.785560][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x28b/0x2f0 [ 153.793566][ C1] Read of size 4 at addr ffff888065f8405c by task udevd/5210 [ 153.800952][ C1] [ 153.803303][ C1] CPU: 1 UID: 0 PID: 5210 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 153.803327][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 153.803343][ C1] Call Trace: [ 153.803351][ C1] [ 153.803359][ C1] dump_stack_lvl+0xe8/0x150 [ 153.803392][ C1] print_address_description+0x55/0x1e0 [ 153.803421][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 153.803443][ C1] print_report+0x58/0x70 [ 153.803468][ C1] kasan_report+0x117/0x150 [ 153.803489][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 153.803515][ C1] do_raw_spin_lock+0x28b/0x2f0 [ 153.803536][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 153.803560][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 153.803585][ C1] _raw_spin_lock_irqsave+0x4c/0x60 [ 153.803610][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 153.803638][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 153.803671][ C1] dummy_timer+0xbc0/0x4650 [ 153.803709][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 153.803744][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 153.803771][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 153.803796][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 153.803822][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 153.803844][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 153.803873][ C1] hrtimer_run_softirq+0x17a/0x240 [ 153.803897][ C1] handle_softirqs+0x22a/0x840 [ 153.803927][ C1] ? __irq_exit_rcu+0xca/0x220 [ 153.803959][ C1] __irq_exit_rcu+0xca/0x220 [ 153.803987][ C1] irq_exit_rcu+0x9/0x30 [ 153.804013][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 153.804039][ C1] [ 153.804046][ C1] [ 153.804054][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.804076][ C1] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 153.804108][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 d0 27 96 11 db f6 0e 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 153.804125][ C1] RSP: 0018:ffffc90002ef7498 EFLAGS: 00000282 [ 153.804143][ C1] RAX: 0000000000000001 RBX: ffffffff81000130 RCX: ffff88807e143d00 [ 153.804158][ C1] RDX: 000000009337fd0b RSI: ffffffff8e37db44 RDI: ffffffff8c2a9260 [ 153.804173][ C1] RBP: dffffc0000000000 R08: ffffffff81776256 R09: ffffffff8e95d260 [ 153.804188][ C1] R10: ffffc90002ef75d8 R11: ffffffff81b1aa30 R12: ffffc90002ef75c0 [ 153.804203][ C1] R13: 1ffff920005deeb1 R14: ffffc90002ef7588 R15: ffffffff81776256 [ 153.804224][ C1] ? unwind_next_frame+0xa6/0x2550 [ 153.804245][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.804265][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 153.804290][ C1] ? unwind_next_frame+0xa6/0x2550 [ 153.804312][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.804332][ C1] ? unwind_next_frame+0xa6/0x2550 [ 153.804349][ C1] unwind_next_frame+0xd5/0x2550 [ 153.804371][ C1] ? unwind_next_frame+0xa6/0x2550 [ 153.804389][ C1] ? do_syscall_64+0x15f/0xf80 [ 153.804416][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.804437][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 153.804462][ C1] arch_stack_walk+0x11b/0x150 [ 153.804484][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.804507][ C1] stack_trace_save+0xa9/0x100 [ 153.804530][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 153.804567][ C1] ? stack_trace_save+0xa9/0x100 [ 153.804588][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 153.804612][ C1] kasan_save_track+0x3e/0x80 [ 153.804639][ C1] ? kasan_save_track+0x3e/0x80 [ 153.804666][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 153.804682][ C1] ? __kmalloc_noprof+0x35c/0x760 [ 153.804710][ C1] ? tomoyo_encode+0x28b/0x550 [ 153.804730][ C1] ? tomoyo_realpath_from_path+0x58d/0x5d0 [ 153.804751][ C1] ? tomoyo_path_perm+0x283/0x560 [ 153.804777][ C1] ? tomoyo_path_unlink+0xaa/0xf0 [ 153.804799][ C1] ? security_path_unlink+0x15f/0x330 [ 153.804820][ C1] ? filename_unlinkat+0x349/0x610 [ 153.804840][ C1] ? __se_sys_unlink+0x2e/0x140 [ 153.804860][ C1] ? do_syscall_64+0x15f/0xf80 [ 153.804894][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.804932][ C1] __kasan_kmalloc+0x93/0xb0 [ 153.804949][ C1] __kmalloc_noprof+0x35c/0x760 [ 153.804995][ C1] ? tomoyo_encode+0x28b/0x550 [ 153.805014][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 153.805044][ C1] tomoyo_encode+0x28b/0x550 [ 153.805067][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 153.805096][ C1] tomoyo_path_perm+0x283/0x560 [ 153.805123][ C1] ? tomoyo_path_perm+0x251/0x560 [ 153.805150][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 153.805181][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 153.805223][ C1] ? __pfx_current_check_access_path+0x10/0x10 [ 153.805244][ C1] ? __d_lookup+0x66/0x780 [ 153.805263][ C1] ? __d_lookup+0x66/0x780 [ 153.805278][ C1] ? __d_lookup+0x6df/0x780 [ 153.805296][ C1] tomoyo_path_unlink+0xaa/0xf0 [ 153.805319][ C1] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 153.805344][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.805363][ C1] ? d_lookup+0x80/0xa0 [ 153.805381][ C1] security_path_unlink+0x15f/0x330 [ 153.805404][ C1] filename_unlinkat+0x349/0x610 [ 153.805427][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 153.805451][ C1] ? do_getname+0x151/0x250 [ 153.805474][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.805493][ C1] __se_sys_unlink+0x2e/0x140 [ 153.805514][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.805533][ C1] do_syscall_64+0x15f/0xf80 [ 153.805559][ C1] ? clear_bhb_loop+0x40/0x90 [ 153.805581][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.805600][ C1] RIP: 0033:0x7f41c8f15937 [ 153.805624][ C1] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 153.805639][ C1] RSP: 002b:00007ffe8f031178 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 153.805658][ C1] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f41c8f15937 [ 153.805672][ C1] RDX: ffffffffffffffff RSI: 000000000000000b RDI: 000055987e5f502e [ 153.805685][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.805707][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 153.805717][ C1] R13: 000055987e610100 R14: 0000000000000000 R15: 0000000000000000 [ 153.805736][ C1] [ 153.805743][ C1] [ 154.056133][ T5910] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 154.061304][ C1] Allocated by task 5844: [ 154.061318][ C1] kasan_save_track+0x3e/0x80 [ 154.432925][ C1] __kasan_kmalloc+0x93/0xb0 [ 154.437550][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 154.442952][ C1] xpad_probe+0x428/0x1fc0 [ 154.447389][ C1] usb_probe_interface+0x659/0xc70 [ 154.452558][ C1] really_probe+0x267/0xaf0 [ 154.457097][ C1] __driver_probe_device+0x18c/0x320 [ 154.462399][ C1] driver_probe_device+0x4f/0x240 [ 154.467453][ C1] __device_attach_driver+0x279/0x430 [ 154.472839][ C1] bus_for_each_drv+0x258/0x2f0 [ 154.477707][ C1] __device_attach+0x2c5/0x450 [ 154.482493][ C1] device_initial_probe+0xa1/0xd0 [ 154.487533][ C1] bus_probe_device+0x12a/0x220 [ 154.492394][ C1] device_add+0x7b6/0xb70 [ 154.496739][ C1] usb_set_configuration+0x1a87/0x2110 [ 154.502218][ C1] usb_generic_driver_probe+0x8d/0x150 [ 154.507694][ C1] usb_probe_device+0x1c4/0x3b0 [ 154.512560][ C1] really_probe+0x267/0xaf0 [ 154.517072][ C1] __driver_probe_device+0x18c/0x320 [ 154.522372][ C1] driver_probe_device+0x4f/0x240 [ 154.527400][ C1] __device_attach_driver+0x279/0x430 [ 154.532788][ C1] bus_for_each_drv+0x258/0x2f0 [ 154.537680][ C1] __device_attach+0x2c5/0x450 [ 154.542465][ C1] device_initial_probe+0xa1/0xd0 [ 154.547502][ C1] bus_probe_device+0x12a/0x220 [ 154.552459][ C1] device_add+0x7b6/0xb70 [ 154.556805][ C1] usb_new_device+0xa08/0x16f0 [ 154.561588][ C1] hub_event+0x2a1c/0x4f30 [ 154.566022][ C1] process_scheduled_works+0xb5d/0x1860 [ 154.571587][ C1] worker_thread+0xa53/0xfc0 [ 154.576213][ C1] kthread+0x388/0x470 [ 154.580297][ C1] ret_from_fork+0x514/0xb70 [ 154.584902][ C1] ret_from_fork_asm+0x1a/0x30 [ 154.589673][ C1] [ 154.592011][ C1] Freed by task 10: [ 154.595827][ C1] kasan_save_track+0x3e/0x80 [ 154.600527][ C1] kasan_save_free_info+0x46/0x50 [ 154.605647][ C1] __kasan_slab_free+0x5c/0x80 [ 154.610424][ C1] kfree+0x1c5/0x640 [ 154.614335][ C1] xpad_disconnect+0x350/0x480 [ 154.619123][ C1] usb_unbind_interface+0x26e/0x910 [ 154.624331][ C1] device_release_driver_internal+0x4d9/0x870 [ 154.630413][ C1] bus_remove_device+0x455/0x570 [ 154.635366][ C1] device_del+0x527/0x8f0 [ 154.639744][ C1] usb_disable_device+0x3d4/0x8d0 [ 154.644791][ C1] usb_disconnect+0x32f/0x990 [ 154.649480][ C1] hub_event+0x1cc9/0x4f30 [ 154.653909][ C1] process_scheduled_works+0xb5d/0x1860 [ 154.659482][ C1] worker_thread+0xa53/0xfc0 [ 154.664105][ C1] kthread+0x388/0x470 [ 154.668198][ C1] ret_from_fork+0x514/0xb70 [ 154.672808][ C1] ret_from_fork_asm+0x1a/0x30 [ 154.677585][ C1] [ 154.679918][ C1] The buggy address belongs to the object at ffff888065f84000 [ 154.679918][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 154.694078][ C1] The buggy address is located 92 bytes inside of [ 154.694078][ C1] freed 1024-byte region [ffff888065f84000, ffff888065f84400) [ 154.707897][ C1] [ 154.710248][ C1] The buggy address belongs to the physical page: [ 154.716680][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x65f80 [ 154.725709][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 154.734215][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 154.741785][ C1] page_type: f5(slab) [ 154.745777][ C1] raw: 00fff00000000040 ffff88813fe34dc0 dead000000000100 dead000000000122 [ 154.754362][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 154.762955][ C1] head: 00fff00000000040 ffff88813fe34dc0 dead000000000100 dead000000000122 [ 154.771899][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 154.780582][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 154.789285][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 154.797965][ C1] page dumped because: kasan: bad access detected [ 154.804393][ C1] page_owner tracks the page as allocated [ 154.810123][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1177, tgid 1177 (kworker/u8:8), ts 91864336683, free_ts 91820114887 [ 154.830894][ C1] post_alloc_hook+0x231/0x280 [ 154.835688][ C1] get_page_from_freelist+0x24ba/0x2540 [ 154.841249][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 154.847094][ C1] allocate_slab+0x77/0x660 [ 154.851619][ C1] refill_objects+0x339/0x3d0 [ 154.856328][ C1] __pcs_replace_empty_main+0x321/0x720 [ 154.861904][ C1] __kmalloc_noprof+0x474/0x760 [ 154.866776][ C1] ieee802_11_parse_elems_full+0x159/0x2ab0 [ 154.872741][ C1] ieee80211_inform_bss+0x161/0x1160 [ 154.878076][ C1] cfg80211_inform_single_bss_data+0xcf9/0x1af0 [ 154.884328][ C1] cfg80211_inform_bss_data+0x266/0x3c40 [ 154.889984][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x730 [ 154.896102][ C1] ieee80211_bss_info_update+0x794/0xa40 [ 154.901777][ C1] ieee80211_scan_rx+0x552/0xa40 [ 154.906748][ C1] ieee80211_rx_list+0x29e3/0x3710 [ 154.911886][ C1] ieee80211_rx_napi+0x1b1/0x3e0 [ 154.916831][ C1] page last free pid 5840 tgid 5840 stack trace: [ 154.923170][ C1] __free_frozen_pages+0xbc7/0xd30 [ 154.928399][ C1] __slab_free+0x274/0x2c0 [ 154.932850][ C1] qlist_free_all+0x99/0x100 [ 154.937470][ C1] kasan_quarantine_reduce+0x148/0x160 [ 154.942964][ C1] __kasan_slab_alloc+0x22/0x80 [ 154.947872][ C1] __kmalloc_cache_node_noprof+0x391/0x6b0 [ 154.953735][ C1] __get_vm_area_node+0x13f/0x300 [ 154.958787][ C1] __vmalloc_node_range_noprof+0x36a/0x1750 [ 154.964699][ C1] vzalloc_noprof+0xb2/0xe0 [ 154.969221][ C1] alloc_counters+0x64/0x5d0 [ 154.973831][ C1] do_ipt_get_ctl+0xada/0x1240 [ 154.978612][ C1] nf_getsockopt+0x26e/0x290 [ 154.983210][ C1] ip_getsockopt+0x19e/0x230 [ 154.987815][ C1] do_sock_getsockopt+0x2d3/0x3f0 [ 154.992852][ C1] __x64_sys_getsockopt+0x1a4/0x240 [ 154.998069][ C1] do_syscall_64+0x15f/0xf80 [ 155.002685][ C1] [ 155.005022][ C1] Memory state around the buggy address: [ 155.010660][ C1] ffff888065f83f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 155.018731][ C1] ffff888065f83f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 155.026796][ C1] >ffff888065f84000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.034858][ C1] ^ [ 155.041806][ C1] ffff888065f84080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.049876][ C1] ffff888065f84100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.057957][ C1] ================================================================== [ 155.066070][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 155.073276][ C1] CPU: 1 UID: 0 PID: 5210 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 155.082135][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 155.092191][ C1] Call Trace: [ 155.095475][ C1] [ 155.098329][ C1] vpanic+0x56c/0xa60 [ 155.102334][ C1] ? __pfx_vpanic+0x10/0x10 [ 155.106854][ C1] panic+0xc5/0xd0 [ 155.110593][ C1] ? __pfx_panic+0x10/0x10 [ 155.115037][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 155.120106][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 155.125167][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 155.130211][ C1] check_panic_on_warn+0x89/0xb0 [ 155.135180][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 155.140243][ C1] end_report+0x73/0x170 [ 155.144530][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 155.149577][ C1] kasan_report+0x128/0x150 [ 155.154103][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 155.159154][ C1] do_raw_spin_lock+0x28b/0x2f0 [ 155.164023][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 155.169415][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 155.174822][ C1] _raw_spin_lock_irqsave+0x4c/0x60 [ 155.180048][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 155.185279][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 155.190702][ C1] dummy_timer+0xbc0/0x4650 [ 155.195258][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 155.200270][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 155.205658][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 155.210609][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 155.216432][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 155.221397][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 155.226613][ C1] hrtimer_run_softirq+0x17a/0x240 [ 155.231750][ C1] handle_softirqs+0x22a/0x840 [ 155.236552][ C1] ? __irq_exit_rcu+0xca/0x220 [ 155.241344][ C1] __irq_exit_rcu+0xca/0x220 [ 155.245957][ C1] irq_exit_rcu+0x9/0x30 [ 155.250226][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 155.255897][ C1] [ 155.258841][ C1] [ 155.261808][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.267891][ C1] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 155.273293][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 d0 27 96 11 db f6 0e 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 155.292919][ C1] RSP: 0018:ffffc90002ef7498 EFLAGS: 00000282 [ 155.299003][ C1] RAX: 0000000000000001 RBX: ffffffff81000130 RCX: ffff88807e143d00 [ 155.307006][ C1] RDX: 000000009337fd0b RSI: ffffffff8e37db44 RDI: ffffffff8c2a9260 [ 155.314991][ C1] RBP: dffffc0000000000 R08: ffffffff81776256 R09: ffffffff8e95d260 [ 155.322974][ C1] R10: ffffc90002ef75d8 R11: ffffffff81b1aa30 R12: ffffc90002ef75c0 [ 155.330956][ C1] R13: 1ffff920005deeb1 R14: ffffc90002ef7588 R15: ffffffff81776256 [ 155.339054][ C1] ? unwind_next_frame+0xa6/0x2550 [ 155.344196][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.350280][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 155.356539][ C1] ? unwind_next_frame+0xa6/0x2550 [ 155.361676][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.367760][ C1] ? unwind_next_frame+0xa6/0x2550 [ 155.372887][ C1] unwind_next_frame+0xd5/0x2550 [ 155.377849][ C1] ? unwind_next_frame+0xa6/0x2550 [ 155.382975][ C1] ? do_syscall_64+0x15f/0xf80 [ 155.387754][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.393836][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 155.400022][ C1] arch_stack_walk+0x11b/0x150 [ 155.404803][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.410913][ C1] stack_trace_save+0xa9/0x100 [ 155.415694][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 155.421081][ C1] ? stack_trace_save+0xa9/0x100 [ 155.426043][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 155.431439][ C1] kasan_save_track+0x3e/0x80 [ 155.436140][ C1] ? kasan_save_track+0x3e/0x80 [ 155.441009][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 155.445804][ C1] ? __kmalloc_noprof+0x35c/0x760 [ 155.450849][ C1] ? tomoyo_encode+0x28b/0x550 [ 155.455628][ C1] ? tomoyo_realpath_from_path+0x58d/0x5d0 [ 155.461448][ C1] ? tomoyo_path_perm+0x283/0x560 [ 155.466484][ C1] ? tomoyo_path_unlink+0xaa/0xf0 [ 155.471543][ C1] ? security_path_unlink+0x15f/0x330 [ 155.477020][ C1] ? filename_unlinkat+0x349/0x610 [ 155.482144][ C1] ? __se_sys_unlink+0x2e/0x140 [ 155.487007][ C1] ? do_syscall_64+0x15f/0xf80 [ 155.491793][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.497893][ C1] __kasan_kmalloc+0x93/0xb0 [ 155.502496][ C1] __kmalloc_noprof+0x35c/0x760 [ 155.507382][ C1] ? tomoyo_encode+0x28b/0x550 [ 155.512159][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 155.517198][ C1] tomoyo_encode+0x28b/0x550 [ 155.521804][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 155.527466][ C1] tomoyo_path_perm+0x283/0x560 [ 155.532331][ C1] ? tomoyo_path_perm+0x251/0x560 [ 155.537369][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 155.542775][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 155.547904][ C1] ? __pfx_current_check_access_path+0x10/0x10 [ 155.554078][ C1] ? __d_lookup+0x66/0x780 [ 155.558513][ C1] ? __d_lookup+0x66/0x780 [ 155.562960][ C1] ? __d_lookup+0x6df/0x780 [ 155.567489][ C1] tomoyo_path_unlink+0xaa/0xf0 [ 155.572353][ C1] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 155.577929][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.584011][ C1] ? d_lookup+0x80/0xa0 [ 155.588185][ C1] security_path_unlink+0x15f/0x330 [ 155.593489][ C1] filename_unlinkat+0x349/0x610 [ 155.598453][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 155.603930][ C1] ? do_getname+0x151/0x250 [ 155.608451][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.614533][ C1] __se_sys_unlink+0x2e/0x140 [ 155.619235][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.625331][ C1] do_syscall_64+0x15f/0xf80 [ 155.629948][ C1] ? clear_bhb_loop+0x40/0x90 [ 155.634684][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.640613][ C1] RIP: 0033:0x7f41c8f15937 [ 155.645049][ C1] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 155.664677][ C1] RSP: 002b:00007ffe8f031178 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 155.673136][ C1] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f41c8f15937 [ 155.681125][ C1] RDX: ffffffffffffffff RSI: 000000000000000b RDI: 000055987e5f502e [ 155.689149][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.697133][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 155.705210][ C1] R13: 000055987e610100 R14: 0000000000000000 R15: 0000000000000000 [ 155.713205][ C1] [ 155.716700][ C1] Kernel Offset: disabled [ 155.721041][ C1] Rebooting in 86400 seconds..